I'd argue it's not extreme enough: Use an alphanumeric password or passphrase, as long as you can tolerate, instead of a PIN.