Indeed when people choose their birthdate as pin-code, or their postalcode... I doubt it will be secure
What you say is very true.