If you want to update your security info (such as a password). You need to verify your ID with your phone or another email. If you don't have any connected to you account (or forgot them), you can add them. After doing this you need to wait 30 days for verification and you can not change your password (and other security settings).
If a hacker or someone has your password, you need to wait 30 days. Before you can change it. Giving the hacker free access for 30 days.
Why would a company still choose to make you wait 30 days?