The entire article is about how you can change literally everything with the PIN if someone steals it. > Mine forces me to enter my password if I touch anythin

The entire article is about how you can change literally everything with the PIN if someone steals it. > Mine forces me to enter my password if I touch anything under iCloud. Do you have 2FA enabled? Like I said, I've seen suggestions that your iCloud pw is required when you don't enable 2FA, but not required if you do. If this is true, it does seem like a vulnerability.