Roku uses the term "channel" when the rest of the world would say "app", although they seem to be trying to migrate to the term "app". If you've set a PIN on your account and set it to be required to "Subscribe, rent or buy shows and movies, or add apps", then no one should be able to add any app without the PIN. Roku has had issues in the past with this, but the issue was that any PIN could be entered to add an app. If it's not even prompting for a PIN when you add an app, ensure you're really adding the PIN to the appropriate Roku account. Check the email address displayed under Settings->System->About on the Roku device in question and check its PIN settings at https://my.roku.com.
Roku Community Streaming Expert
Help others find this answer and click "Accept as Solution."
If you appreciate my answer, maybe give me a Kudo.
I am not a Roku employee.