Yes, you really shouldn't ever use a pin code for BankID (or your screen lock) in public. Only biometrics if anyone is watching.