How? The secure enclave doesn't have any trusted input/output capabilities other than the power button double click and biometrics. The PIN isn't entered via these.
There’s a thing which I know very little about personally but have hearsay of its existence where it rips control from XNU and takes over touch input for this
