On an Apple Developer handoff, 2FA is the usual back door. A seller who still holds a trusted device or the recovery key can take the account back after you change the password.
- List trusted devices and which will be removed
- Regenerate the recovery key; retire the old one
- Move recovery mail / phone to you
- Remove old team members and certificate holders
Also split Agreements, Tax, and Banking: three desks. Apple desk.
