There have been recent stories about how thieves were looking at people entering their passcodes into their phones, snatching the phone when it was unlocked and using the pin to disable iCloud/Find My.
I recommend using the “Screen Time” feature on iPhones to protect against this. You can basically set a _different_ 4 digit pin to access some of the settings of the iPhone, including the Apple ID one. (The setting becomes grayed out and inaccessible until you disable screen time).
Apple acknowledges this and seem to be ok with it [1].
[https://www.macrumors.com/2023/04/19/apple-responds-to-iphon...]
But at face level… your phone is so personal that it’s pretty easy to mess with basically all of your life.
When you have someone’s unlocked phone, you can usually get access to their emails, and use that to reset most accounts. Finances, social, emails, often work etc.
Here’s the WSJ explanation if you want:
https://www.wsj.com/articles/apple-iphone-security-theft-pas...