Good PINs are ones you're not allowed to brute force. You can easily configure an iPhone to wipe itself after too many wrong guesses. There's a single checkbox labeled "Erase Data", saying "Erase all data on this iPhone after 10 failed passcode attempts."

You bet I have that enabled.

My toddler would wipe my phone with that on

We each have our own threat models. Toddlers are high on that list, to be sure.