Account recovery key vs Apple ID password reset via PIN

Did you see the information provided here. It completely disables anyway for the Apple Account password to be changed unless you have another Trusted Device. A Trusted Device is one that is already signed into your Apple Account, so any other reset without that 28 character key is not possible. If you do not have any other device signed into your account and don't have the 28 character key, you will lose your Apple Account and not be able to access it.

A recovery key is a secret 28-character code that you can use, along with a trusted phone number and an Apple device, to recover your account and data.

• When you set up a recovery key, you turn off Apple’s standard account recovery process.
• Instead, access to a trusted device or your recovery key will be required to reset your Apple Account password and sign in to your account if you ever lose access.

This gives you more control of your account recovery methods and can help prevent an attacker from gaining access to and taking control of your account. However, if you lose your recovery key and can’t access one of your trusted devices, you’ll be locked out of your account permanently.

Set up a recovery key for your Apple Account - Apple Support

DonSphynx wrote:

Hi,

If I enable the recovery key feature, does it prevent that totally insecure Apple ID reset-with-phone-PIN thing? The recovery key could be printed on a paper and sit somewhere in a safe, until needed. So far I did not find any sane solution to disable the PIN feature. The 1h delay with stolen device protection is a poor workaround, not a real fix. I literally don't want my cloud account to be modified by anyone or anything from anywhere in the field.