You’re required to PIN, Touch/FaceID, and/or enter iCloud password simply to purchase an app, even when it’s free, unless you specifically set otherwise in your

You’re required to PIN, Touch/FaceID, and/or enter iCloud password simply to purchase an app, even when it’s free, unless you specifically set otherwise in your device settings. What attack do you envision that would be possible here that doesn’t require an attacker already in possession and full control of your iCloud-linked device?