You would use a PIN that is generated at the time of freezing the account. However, this doesn't prevent a future attack from obtaining the PINs.