If that does happen, which seems unlikely (& as far as I’m aware, there haven’t been reports of this being a common issue), then they’ve acquired your PIN fraudulently which (subject to Monzo’s terms) which means that Monzo is liable for any resulting loss of funds.