> Security Delay: Some security actions such as changing your Apple ID password also require you to wait an hour
and then perform a second Face ID or Touch ID authentication.
Emphasis mine.
It seems like you have a lot of reasonable questions and concerns about the efficacy of this measure, but Apple have done a pretty good job of addressing them and explaining their rationale in the first few paragraphs of the documentation.
