The only thing a recovery contact can provide is a code to help you get back into your account. That code isn’t the only thing needed to recover the account. https://support.apple.com/en-us/HT212515 “If your friend or family member is locked out of their account, they first have to verify some of their Apple ID account information. Then, they'll reach out to you on the phone or in person. You can follow the steps below to generate and share a recovery code that they can enter on their device.” https://support.apple.com/en-us/HT204921 “After you request account recovery, you get an email with a confirmation of your request and the date and time of when you can expect to regain access. If you submitted your account recovery request with iforgot.apple.com through your device's browser, you should avoid using that device during this period. Using that device might cancel account recovery. To avoid delays, turn off other devices that are signed in with your Apple ID until account recovery is complete. When the wait period is over, Apple sends you a text or automated phone call with instructions to regain access to your account. Follow the instructions to immediately regain access to your Apple ID.” In your scenario, I don’t know how a thief could do the recovery process without you knowing. In your scenario you still have all your Apple devices. Answer from PichaelSmith on reddit.com