Thanks for the Questions see below answers:
Answer #1
Since the private key is encrypted on the SD card, an attacker would need access to the card itself to extract it. (to extract the encryption key which is different for every card )
Answer #2
The only mechanism in this case is a PIN code. Entering the wrong PIN three times will format the SD card.