You are not asked for your PIN when completing an order. Only when withdrawing BTC directly from your account. This is not a bug.