If your activesync account is Enterprise level then the policy can force a password for messages and you don't need to enable password for the playbook itself. I'm currently doing this.
They have this app for blackberry phones, perhaps it will soon come to the PB. I used to lock my picture file so my girlfriend couldn't see it while I was in the shower.