The pin is only for local access, it doesn't get used to secure the generated code. I know this because I forgot my pin on a vasco device, called my bank and they gave me a code that allowed me to change the pin (and nobody else knows the new pin, not even the bank).