FYI the latest Equifax press release (where it was announced 2 executives were being dismissed) had a small bulletpoint towards the end which said that pins would be randomly generated.

Don't know if that change is live, however.