If I have your unlocked iPhone, I could probably reset your Apple ID because I have access to your email and your texts so I can reset your Apple ID password unlock your phone unlock. Remove it from Find My and reset it.

It makes me wonder if there’s some way to put a third lock on there that’s not normally unlocked.