PS: Actually I was wrong, I just checked and it seem very weird that you can change the password without a confirmation from another trusted device or trusted n

PS: Actually I was wrong, I just checked and it seem very weird that you can change the password without a confirmation from another trusted device or trusted number. Meanwhile to mitigate a little the threat you can delete your mobile phone number from trusted number so someone hijacking the SIM card cannot receive a confirmation code if he put your sim card into another phone. ——————- I don’t really get their point it’s like if someone told us « Linux have weakened their threat assessment level, if you got the password of a sudoer user you can access evrything on the system » The only difference being that it extend to what you putted in the cloud. But loosing the passcode on iOS was always the equivalent of giving full admin right on the machine. That’s the whole point of TouchID/FaceID/SecureEnclave teach user to have a strong passcode while keeping a smooth UX because they don’t have to type them regularly. So yes this is a single point of failure which come with pros and cons. - The bad news is that if you give your passcode you can loose everything - The good news is that the only way to crack your device is to guess in ten attempts what is the passcode from 1000000 possibilities by default (maybe less cause you can’t decently use some combination like 123456)