If you require the PIN to lift a credit freeze, some people will lose their PIN and never be able to lift the credit freeze.

So there must be a workaround that relies on verifying identity, based on non-random information (e.g. no PINs, no passwords).

They've made it too easy, but until we can request that a credit agency blacklist an SSN and forget all associated information, this will keep happening.