btremI don't know much about it, but I suppose a thief/scam artist might get a new sim card registered with my phone number, and then impersonate me. But they presumably can't log into my apple account, and therefore can't provide a verification code.