You know damn well most people aren't going to do that.
It's all about threat mitigation. Home machine with your financials and kid pics? Not as important as say... your work machine that you're going into and out of the DoD day after day.
Because, well, and bear with me here, if they did, they would have set a darn PIN?