It is kind of BS though that someone who simply steals your phone and passcode can, with nothing else, completely lock you and all of your other devices out of your iCloud account (including photos and documents) for the rest of your life with no recourse.

The article does a terrible job of burying this important detail.