That makes sense. I'm guessing this is why the forensics company has a procedure for lifting some sort of key out of the paired iTunes library to get access to the device without the PIN.