Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Not sure if 9to5Mac is allowed here, but you are now aware reseller scum, “repair shops”, thieves and criminals (all of which are redundant) using password phishing kits and fake receipts to access iCloud-locked iPhones

https://9to5mac.com/2019/02/06/hack-icloud-locked-iphones/

It comes down to a balance between convenience, privacy, and security.

Apple could tie a device to a legal name or other personal identification. Those who opt-in would have to present ID to reset a forgotten password. Muggings could be decreased if Apple implemented a time delayed iCloud unlock. Once again, it comes down to what the right balance is for consumers.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.