How unlikely is this to happen? I had my iphone stolen and they were able to change my apple id and gmail. Im assuming they changed gmail password by the forgot password option (they will send you an sms) and changed my apple id once they got hold of my gmail.

Now how they got past the face id and 6 digit pin is beyond me since i didnt use my phone during commute