Right, so, no data protection from someone who fixes the phone and guesses the 0000 PIN.

Sorry OP, but you trash the phone, don’t sell for parts.

True, but only once it is online, right? Someone that acquires the phone and guesses the passcode could access data offline.

Or does the Find My network communicate remote wipes? That would be neat, but my understanding is no.