Defence in depth helps make the situation less catastrophic. Right now, with just an iPhone passcode, you can take complete control of the Apple ID [including w

Defence in depth helps make the situation less catastrophic. Right now, with just an iPhone passcode, you can take complete control of the Apple ID [including wiping the user’s other devices], any apps protected by Face ID (even those with 2FA if it’s SMS-based), private photos, notes, passwords, the works. Those consequences are design choices - convenience over security. There could be features (tighter Face ID, multiple passcodes, etc) that reduce the blast radius of a leaked iPhone passcode. But Apple hasn’t implemented them. It hasn’t given users the tools to protect themselves, if they value that more than convenience.