Seems like what’s needed is the ability to load an alternate profile or some kind of demo mode based on the pin. Something that looks normal but doesn’t have any info you don’t want others to see, without actually deleting anything.

I look forward to someone making an appropriate oompa loompa song for his exit.