It's not the open-circuit voltage generated by the piezo that matters, what matters is how much current it can drive into the pin protection diodes. There is an Atmel application note that says the pin protection diodes are OK up to 2mA. This is equivalent to the piezo producing 2V when loaded with a 1K resistor.