I didn't use icloud so don't know how it is compared to this method.

Need to have Apple device to use icloud?
Using passwordless, when someone else trying to login, the authenticator app will give notification asking whether to allow the login?

Using this Outlook alias, nobody will be able to try access the account since no one know the ID.