I don't know the exact implementation of Worldcoin, but I would assume that you can reacquire control of your account by proving that you are the person with the biometric fingerprint.

Edit: Though of course if their credentials have been misused, they might be locked out of many systems. Perhaps that was what you meant?

No idea how world coin is supposed to work.. but couldn’t they get their account back by scanning their iris again? Like, I’m guessing you’re not supposed to have to scan your iris every time you use your account. But can’t the iris be like a “I forgot my password” mechanism?

AFAIK, nope. If that was the case there would be no point in buying anyone's account. If you stored value in it they could always use their iris to get into it.