> So basically this forces me to change from a password to a PIN and this is supposed to be more secure?

Yes. I used an alphanumeric pin: my password. The main malware entry point is the web browser.