hi,
you cannot remove the pam login method, otherwise the default root user could never login through the web gui again.
but you can make another method the default, just go to datacenter -> Authentication -> Edit the one you want, and enable "default"
also, why do you think the pam login is unsafe?