To pre-empt privacy problems in Mojave, you need to know information which is currently not easily obtained. Here’s an app to do it for you.
Have you ever entered the password for your Mac instead of that for your Apple ID? This should help make it clearer which you need to use.
Access controls require confirmation of who you are, and verification that you are permitted to use the system or services.