They are saying losing phone + revealing pin is harder than exposing your password/phishing/social engineering/cracking.