You can also remotely remove the iCloud lock, even without performing 2fa (not exactly sure how it is secured then, but it worked)