iPhone Recovery Key attack vector kills your iCloud access: Workarounds pending an Apple fix including Apple ID protection

Link. 1. It’s crazy that 6 digit passcode gives access to Apple Password Manager AND the ability to lock someone permanently out of their Apple ID (photos, media, software, documents, etc).
2. Use Screen Time account lock passcode to prevent setting/changing Apple ID or Recovery Key.
3. Good practice: Designate a Recovery Contact.