It does matter because using a ridiculously easy to guess pin would explain your alleged missing coins when you have already stated you think you logged into a phishing site previously. Just sayin'...