Been playing RS off and on for three years. I have NEVER been hacked. Never had need for a pin either. And this image is why I won't ever be hacked. (Asterisks blurred to conceal length.)
For a site that is trying to promote password security, they shouldn't be encouraging you to enter your password. It's also not right if you use real words in your password, it would be cracked faster