How easily can another person get into your iCloud without changing your iCloud password and having to authenticate chin verified by phone

I have an iPhone 8 is disabled I took my Sim card out and put it in a six that’s my old phone I have people that have hacked my iPhone 8 to get information out of it I mean screen recording the whole 9 yards how easy would it be for them to get into my phone and iCloud information without two verifications