Don’t use a short passcode. Mine is twenty digits. Anyone who can figure my code out is impressive indeed. Enable faceID or touchID, and if they fail then go to the bathroom or somewhere else and enter your code to refresh them.

This isn’t hard. Basic precautions.