What you did in the past is not what is possible today. In particular in the past 3 years or so Apple stepped up security by requiring two factor authentication on all new accounts. You could have an older account that does not use it (but Apple suggests you change to using it). This is Apple safeguarding accounts. I have both Microsoft and Google accounts and their requirements in terms of two factor are not as stringent as Apple's. In other words, the security is less. It doesn't make any difference to me since the only thing I use those accounts for is email. People can have hundreds if not thousands of dollars invested in Apple hardware, software, media, and services so you want pretty stringent security. This has to downside though that a few users are not that careful and ultimately lose access to their accounts because they can't prove to Apple they are the acount owners. The bar works both ways.
Apple does have account recovery, but the bar to proving you are the owner can be high. It also takes several weeks. You can save yourself a lot of time and hassle by taking a few steps to make things easier.