>If accessing device-local data is outside of the threat model, why are we encrypting these data at all? We might as well store them in plain text. The PIN is

>If accessing device-local data is outside of the threat model, why are we encrypting these data at all? We might as well store them in plain text. The PIN is still potentially useful in that it prevents anyone with access to the device from getting access to the secret information without having to perform an overt act. The difference between leaving a piece of paper with the passwords laying about and locking it in a drawer.