You can change the associated apple id password using only the phone pin, then use that to disable activation lock & find my phone, then the phone is fully yours. Most people use easily guessable pins.