Keep PIN protection enabled - the storage on modern phones is encrypted by default and it's usually not possible to recover data without having the original PIN (unless you set it to something obvious like 0000).

Both iPhones and Android will HEAVILY complain in your setup process if you refuse to secure them with a PIN or a password.