Use two fingers to put in your PIN
One actually presses, the other one doesn’t
You could generate an absurd amount of possible PINs that could work on your card, giving any PIN peepers a seriously hard time, should they somehow have the intent to get ahold of your card and PIN through spying and pickpocketing
If you’re in the US or plan to go there, don’t use biometrics for your phone. “Law enforcement” can’t make you give up your pin, but they can take your biometrics.