They explicitly mention that the security is as hard as the weakest link and thus suggest to not use a simple passcode anymore but switch to a full password. A

They explicitly mention that the security is as hard as the weakest link and thus suggest to not use a simple passcode anymore but switch to a full password. As long as the password needs to be bruteforce with more than 50K attempts (really, any reasonable one), your weakest link is the touch sensor, which is still 5 times better than a 4-digit passcode used by only 50% of users.