@simonbs AND they can reset your entire Apple ID password with just the passcode. @joannastern reported on this last year and it can be a huge problem. Apple says they’re aware and always evaluating the trade-offs, but haven’t come up with a better solution yet.