An IAM user can be deactivated to prevent unauthorized access. Root accounts cannot be deactivated.
To log in to an app, then create and use an IAM user's credentials in case of if you lose your device.