I sympathize with the writer, but have to ask, what solution would make it possible to resolve this situation without weakening the security for another case that sounds the same but is being used by someone malicious?

I think you have to activate the Apple 2-factor authentication so that your key Apple ID info cannot be changed without corroboration or that 28 character code.

If Apple were to let this situation be reversed, who is to say a hacker wouldn't be using this exploit to take over someone else's account?