I get the impression Apple stores handle this reasonably well (though you lose data after a last-ditch password reset if and only if that data is unavailable to law enforcement warrants).

Anyway, I think the the common case is that most data is recoverable with an ID or whatever they require. FWIW, searching HN for: “locked out of icloud” doesn’t produce much.