It doesn&#x27;t matter that the UID is incorporated into the key.  If you have a copy of the flash then you can restore the device to its current state, at which point you can brute-force the PIN.  The only way this could not work is if the A6 has some non-volatile storage on-chip and it is used to prevent this kind of replay attack, but AFAIK this is not the case.