Im not a expert in security but what about a thief that get an iPhone luckly unlocked. They can transfer all your info to a new iPhone without a iCloud password or anything? Are you serious? Even if they apply flight mode so you can't delete your stolen phone online while is being cloned? This is a serious risk. Correct me if I am wrong or tell me you have to activate or deactivate this function by an iCloud password. Thanks
It probably requires iCloud authentication. It’s not like some lone programmer whipped this up without any product review, feedback or QA.