Able to reset Mac password in recovery mode without any Apple ID or fire vault

for some reason my MacBook password was not working so I decided to change it in recovery mode (going to options -> terminal -> “resetpassword”). I thought it would ask for fire vault key or Apple id password but it did neither and I was able to change my password without any other security steps and log in. Why is this allowed by Apple ?! What’s the point of a password if you change it without being logged in and without any extra security ?