“if a thief watches you enter your passcode, then steals your phone, they can flick the Recovery Key option on (Settings > Your name > Password & Security > Account Recovery > Recovery Key), and you are then stuffed.”