You can use a strong passphrase for a user profile which you want to remain secure even after years without applying security patches for the secure element. A random 6 digit PIN is fine if you're fine with depending on the secure element not being exploited which is enough for most people. If you have particularly sensitive information, remember that you can put it in a dedicated user profile.