Is a four digit PIN really safe enough?

On its own, no, and we do not pretend otherwise. It works because of what surrounds it: the PIN is useless without a paired device, it is checked on our side rather than on the tablet, five wrong tries lock that person for five minutes, and locking one person never locks the restaurant out of its own counter. It is the right trade for something typed one handed while a customer waits.