chrissly I think having a 4 digit Pin way more insecure, because you can see, what you typed
The complexity of pattern auth isn't well and actually incentives short low entropy passwords, 4 digit pins don't have that incentive unless you are literally doing 1111/2222/1234 etc.
Regardless GOS recommends 6 digits if I'm not mistaken