You only need the pin code to reset the icloud password, and can lock people out of their accounts.