Except Signal PIN appears to be trivial to bruteforce for Signal itself, unlike this properly secure verification.