Extra protection for Find my device

Nephew was mugged at gunpoint and asked to unlock phone. Thieves turned off Find my phone. Shouldn’t this feature be password protected too? You know how you need to enter your passcode to see your saved passwords or add a new face, we’ll this should be double or triple protected. Now we’re feeling doubly victimized as he was robbed, but the thieves also had access to all the information on their phone unrestricted for about 30

minutes until he could get to a computer to start changing passwords