What prevents my iCloud Recovery Contact (or someone who maliciously got into their device) from abusing his ability to generate recovery keys to take over my account?

I have read the Support article

https://support.apple.com/en-us/HT212515

But I don’t understand how this is true: „As someone’s account recovery contact, you won't have any access to their account, only the ability to provide them with a code upon request...“

I read this as „they won’t have immediate/direct access“ but still… they can screw you up. Right?

abusing access account article device don icloud keys privacy recovery support understand