Comment by irrational

I just tried it. Someone would need my apple id, my password, access to one of my apple devices (I had to enter a code that appeared on one of my devices), and access to my email. If someone already has all of that, I'm hosed no matter what.