For computers I create an unprivileged "apple" account when it goes in to service. For iOS devices I just wipe them before service, but if you are sending to a third party repair house you might make a new throw away account, otherwise your device is in a stealable state.

I suppose if your device is beyond being able to operate then you are going to need to change your password or passcode when you get it back.