Not really brutal. It's a PIN code, not a passphrase. Unless those are used with HSMs (like with bank or SIM cards), their only use is to prevent immediate acce

Not really brutal. It's a PIN code, not a passphrase. Unless those are used with HSMs (like with bank or SIM cards), their only use is to prevent immediate access by non-technical adversary, so there's little point in securing those beyond typical UNIX filesystem permissions (given you're not supposed to have root access or access raw block device, huh).