But the service center can be, is not it?

And after deleting PIN, user can get from service center smartphone with files and accounts (with saved passwords) of old owner.