I believe the key is stored as it is on a Mac, in your keychain, which is encrypted - so you don't get it in plaintext if you steal/hack the phone.

Beyond that, it'd be nice if the phone would erase itself if someone kept trying to crack your PIN, but I don't believe it does that... I should file a bug really!

Hugo