Well more of a product/security matter here. The amount of access that an unlocked device gets you is nuts. I didn't expect to be able to reset an apple id password with a device pin code.
I'm not sure it matters - it's not a technical-heavy flaw in Apple's security. He either recorded people putting in their unlock codes, or straight up asked them what it was. The reporter doesn't have to be very technically-minded to follow.
Ah well where’s the hack then? I assumed it was going to be their typical click bait and was right. Accessing someone’s data with an unlocked phone isn’t hacking at all.
I think most people wouldn’t expect it to be possible to disable iCloud and turn off remote wipe with just the device passcode.