I have a question, why is the PIN code sufficient?
It wasn't... The hacker in question "
retrieved the seed phrases" as well.
In other words, if a password of sufficient length is inserted, will the hacker easily gain access to the device?
If you were referring to using a passphrase, then even in such cases, hackers can't access it
[it's not stored on the hardware wallet].
