How to Protect Your Account From Theft

The thieves have added a recovery key to their account, which again, this recovery key is a feature Apple added to help people protect their accounts. A thief who's taken over your account and locked out your other devices and then adds a recovery key means that some of these people are like locked out of their Apple ID permanently. They'll never get that key. And even if they themselves had previously set a recovery key, the thief can override it because with the device in hand and the passcode, that iPhone is considered one of the trusted devices in your chain.