You're speculating a bit too much. The problem is with Allow Apple ID to reset your password. If this is enabled, Apple basically gets the ability to lock you out of your computer.

For this reason, I always leave it off, and recommend everybody does the same.