Seems like it. My points in that regard about only have this setting be accessible behind a login and 2fa is the way to go. You sold or otherwise deprived yourself of your iPhone and forgot to turn off iMessage? Contact Apple support or go to an Apple store. This functionality disproportionately benefits bad actors and intelligence agencies around the world.

You don't need to login also for Apple.

Why would an intelligence agency not be able to go to an Apple store or contact Apple support? This seems like it would only make things harder for users in good-faith scenarios without providing any real security benefit in others.

I was thinking more of in the field, just in time recon. Some things could be justified as imminent threat situations, at least after the fact.