Yes, it's all moot if you use a short numeric pin. The attacker can make their own brute-forcing build instead of having to ask Apple to sign one.