My Samsung Galaxy phone has a feature named "auto factory reset," by which (according to the blurb in the device's settings) this happens:
After 15 incorrect attempts to unlock your phone, it will be reset to factory default settings, and all data will be erased, including files and downloaded apps.
Question: Does that mean "auto factory reset" makes the phone immune to brute-force attack and makes irrelevant the sort of information as pictured at the bottom of this post?
It would appear that, with only 15 chances, even a four digit PIN should be strong protection against brute force? (Or more practically, something like five lower case letters long.)
Or is there a catch (as there always seems to be), and am I better off with a long password? The catch might say that the "auto factory reset" itself can be separately defeated, after which the brute-force attack can be applied.
For this question, please assume that the android phone in question is device-encrypted.
Added in response to comments: The case I am worried about is my losing the phone and its falling into the hands of a hacker with time on his hands to "try and crack, why not?" I am not worried about a determined person with his eyes set on my phone (as it is not an interesting target). I have a type of keyboard that makes it very difficult to "look over my shoulder." (It enters different values depending on the direction of the strike and drag.)