Sorry if I wrote something in a confusing way.
This is concerning My .eu portal, which is a completely separate portal of the registry, that also allows generating tranfer codes without involving the current registrar (as well as showing all private info).
This is the login page: https://my.eurid.eu/en/auth/login/?next=%2Fen%2F
The only needed information is e-mail address associated with the domain and the domain name. While both are needed, and the domain name alone is not enough, the e-mail address is available in the WHOIS information.
When the Registrant is a natural person the Registry publishes the Registrant´s e-mail
address and language.
This mean anyone, at any time, can generate authorization code, and attempt to use it at the My .eu portal.
Based on EURid's info, entering the portal is enough to get access to the transfer code.
From the My .eu platform: You can also issue the transfer authorization code yourself on the My.eu account. Please do not confuse the access code you will receive by email (which will enable you to enter the My .eu platform) with the transfer authorization code (which you will issue once you are on the platform).