It's madness to me that all it takes to completely own an iCloud account (including one with yubikeys, advanced data protection, etc set up) is an iPhone passco

It's madness to me that all it takes to completely own an iCloud account (including one with yubikeys, advanced data protection, etc set up) is an iPhone passcode. It should be possible for security conscious users to disable the "change iCloud password with only an iPhone passcode" feature. That would largely fix all these concerns. I think that it should be disabled by default if you set a recovery key or enable ADP, especially if you have FIDO2 tokens.