In order to exploit the 6-digit password across the web, the attacker needs 1) the password, 2) web access from anywhere in the world. To exploit the PIN guarding your phone, the attacker needs 1) the PIN, 2) your phone. You can't prevent the attacker from having access to the internet, but you are probably reasonably good at protecting your phone physically.