One thing I forgot to mention. Every Apple account has a phone number tied to it for 2FA. That secondary recovery account should have a phone number you have no access to, otherwise you can reset its password. You can get a SIM, use it for account creation and then throw it away (though I doubt most people will need measures this extreme). There are further edge cases that I won't go into here, feel free to email me if you run into one.

Brought to you by years of undiagnosed severe ADHD.