A thief who watches you type your passcode in public can change your Apple ID password, disable Find My, and lock you out of your own account before you get home.
Apple built a fix for this. The problem is it’s off by default.
Full breakdown of nine overlooked iPhone privacy settings at the link (plus 2 bonus ones for paid subscribers).