Would not doing a random amount of extra calculations during this step not address this issue better than having a constant time calculation? Of course, fundame

Would not doing a random amount of extra calculations during this step not address this issue better than having a constant time calculation? Of course, fundamentally, if something has access to the hardware, good luck securing things. A dedicated attacker will figure out a way to bypass the PIN.