Then they’d steal the phone and change the passcode, change the face in FaceID, the password in AppleID, turn off Find My iPhone, and render the passwords in a keychain unusable, all within a minute ...