In the case of Windows Hello, a PIN is very different from a password (such as your live.com password). PINs are encrypted per-device, and are never transmitted from the device. They are resilient against rainbow table brute-forcing, and they generate asymmetric cryptographic key-pairs by using the device TPM.
So forget what you know about ATM PINs; this is a markedly different concept.
So forget what you know about ATM PINs; this is a markedly different concept.