You can wipe or factory rest without a pin. There are many articles and exact instructions at the top of search results for “reset pixel without PIN”.

As for who owns the data, that is most definitely the person who sets up that account with a PIN, not the device owner. If you forget the PIN, that’s a nasty situation, but unfortunately working as I think most would agree is best.