Threat is not the only factor. The control (entering a PIN) has a cost (it's tiresome) and only a certain risk reduction value (if they can steal my key, they c

Threat is not the only factor. The control (entering a PIN) has a cost (it's tiresome) and only a certain risk reduction value (if they can steal my key, they can probably steal my PIN).