a four digit pin? not much. A strong passphrase? quite a lot actually. It means they cant get access to your data without your cooperation.
A skilled person or organization yes. Obtaining the latent prints probably isn't the hard part, I imagine stealing someones trash would be enough for that.
The tricky part is making a clone accurate and detailed enough that it works in less than 6 attempts.