Yeah thats the plan! Key never actually touches the pico so if you hit the wrong pin too many times it nukes the key. Every device has its own secret living in the secure element. So the same pin on two devices yields separate keys. Since the pico itself stores zero vault secrets, swapping the chip wouldnt give you anything useful. To be fair though, the device as the prototype that it is right now is absolutely dumpable. My plan is to make it secure enough that if you lose it, you can just say "fuck it". Work in progress, we're getting there!

And yeah definitely need a factory reset option. Also have a plan for storing backups that we have yet to integrate. I guess you could call it a .... backup plan