Just a guess… but they would just go back and ask him for the real pin if they saw the profile was empty.

My understanding is phone’s security model aren’t designed for multiple user accounts