Find my device security flaw

My Galaxy Buds Pro were taken by someone.

I request on Find My Mobile to be notified when they were found.

I received an email to say that they were located, but when I log into the site, the device was removed from my profile.

I've been told by Samsung support that they have been registered to someone else and that is why I can't see them any more. That is a huge security flaw. What is the point of the find my device feature if someone can just take them and register it to themselves.