Happened to me today. First got the message on my computer that my location was unknown and needed to enter a code from the phone. By the end of it, I had to reset my Apple password. No idea why it happened.
But none the less, I liked my old password and had to change to something else.
So... anyone with just your iCloud email address can get you locked out?? That's not what I would call secure...