If someone steals your iPhone and knows your passcode, they can lock you out of your Apple ID in under a minute.
Check these settings:
Find My iPhone: Settings → Apple ID → Find My → Turn on Find My iPhone
Stolen Device Protection: Settings → Face ID & Passcode → Turn on Stolen Device Protection
Disable Lock Screen Control Center: Settings → Face ID & Passcode → Turn off Control Center
Emergency SOS: Settings → Emergency SOS → Enable Emergency Contacts + Crash Detection
These take about two minutes to set up. Worth doing.