What about the guy that took it from you? I think he can brute force it, or no? I read some articles about this.
He can ... eventually.
Each time he tries a pin that fails, there's an extra wait time added for the next one. Unless you're very unlucky you have plenty of time to move your coins.
It doubles the wait each failed attempt, I believe that's infinite (no good reason why not, the code is on github)
That's pretty much unbeatable security. If your password or whatever it uses is strong, then you are probably safe even if it's stolen.
Yesz. But physical possession of the device means they could crack it eventually, given enough resources. So you wouldn't rely on it.
Point is, it's not a disaster like losing your cash wallet is.
Yes, if someone could for instance acquire the means to extract the contents of the Trezors memory using SPI clip type method (attaching electrodes to the EEPROM or whatever memory type the little ARM M3 in the Trezor uses for persistent memory). It's possible that the password scheme for Trezor actually encrypts the contents of the persistent memory. Not sure on that though.