How does this scanning QR back and forth between the Blockstream website and the Jade wallet adds any security? Once the PIN is entered, anyone can do the same thing. How is this method any more secure than just entering PIN to unlock a wallet?
Creating one topic is enough, there is really no need for you two create two separate topics in short time about the same PIN issue 
Adding additional PIN code is replacement for secure element, and it's not recorded on device like in other hardware wallets.
That is why they Blockstream is calling this a virtual secure element.
There is plenty information on their website, especially relaed with QR mode you are using:
https://help.blockstream.com/hc/en-us/articles/10731523559193-Which-unlock-method-should-I-choose-to-access-QR-Mode