@gruber @tomcoates That’s the issue: 4-digit pins are easy to observe or record, and thus replicate with possession of the phone.