Apple has no adequate way to actually verify who anybody is without (a) forcing them to physically visit one of a small number of offices (it can't be every store), and (b) probably charging a significant fee to cover the cost of doing real verification.
And even that demands assuming that the identifying information on the account is right.
I would also force users to watch a video explaining the security features and quiz them before turning them on. You can't expect users to immediately understand how the security model works.
Even with their strong privacy fundamentals they know more about their account holders than any single business should.
My bank is able to verify me remotely to login to their app from a new device in under 15 minutes, just with a photo of my ID card and a video of my face. And the bank is liable for any losses caused if they misidentify me.
Why can my bank do it but apple cant?
Perhaps even more important, the bank knows exactly what liability it's assuming, and what risk it's exposing you to. There's a limit on how much money the app will let you move (even if the bank doesn't tell you what it is). All the transactions you can do are defined by the bank, it knows what's going on at all times, and it can and does apply extra checks for risky-looking transactions.
And bank transactions in general have a whole reversal-based security layer on top of all that.
On the other hand, people use their Apple accounts to log into God-knows-what third party systems with God-knows-what risks and God-knows-what other security measures or lack thereof.
Oh, and also the bank charges you ongoing overt or hidden fees specifically to cover the costs of securing your money. And of insurance if it fails to do so.
Meanwhile Apple is unable to manage to identify its own customers in its home jurisdiction.
Banks write off tens of billions of dollars of fraud costs a year. They can do this because money is fungible.
I don't know, I'm not a multi-billion dollar multinational organisation employing some of the smartest and highest paid engineers in the world.
Off the top of my modest head though, an ID check at one of the thousands of stores they have around the world sound like it could work.
The fact that the government doesn’t have a great standard for identity and it’s left to banks and tech companies is crazy.
You know there are smart criminals who use fake, or fraudulent passports and travel documents? And yet we still go through the process of using them because a system with some control is better than chaos and no control.
