According to this (1) since iOS 11 update PIN code is now a single point of failure, if know PIN and have access to device (or probably Apple made data dump on Chinese servers) you can have everything.

(1) https://blog.elcomsoft.com/2017/11/ios-11-horror-story-the-r...