That made me wonder. Are they secure?
What makes anything secure? The same attacks that can be used to your traditional windows password can be used against the gesture and pin password. In addition to those traditional attacks if an attacker has physical access to the machine, they can use additional attacks ( i.e. brute force by smudges ) on your gesture password, in the end your still secure.
Once somebody has physical access to your machine any number of attacks can be performed, including yanking out the hdd, and reading the data on another machine.
Your Windows Account ( i.e. msn, hotmail, outlook ) still requires a traditional password to be accessed.