A PIN is device-locked, never transmitted to servers, and verified locally by your TPM chip — which is why security experts say it's more secure than a password.