Most phones are locked with a four digit numerical PIN. The current technique is taking an image of the flash memory, and reflashing the memory after every few attempts.
It still takes a bit longer than straight brute force without a temporal lockout, but it’s still pretty trivial.