They discuss security on the 2nd link on the OP.

Similar to xmarks, firefox sync uses a passphrase to encrypt your data locally. The data passphrase is not stored in the cloud.

It's not a PIN or a password, it's a passphrase, like a sentence or multiple words.

-David