Yes, and it's heavily pushed. But if this scam really goes that deep in manipulation/phishing: > but he managed to get victims to give him the iCloud passwords

Yes, and it's heavily pushed. But if this scam really goes that deep in manipulation/phishing: > but he managed to get victims to give him the iCloud passwords he needed to download their data. Then he might have been able to get victims to allow his access.