They don't need to know because it doesn't matter and they don't care. They see it as you buying a digital item. It doesn't matter to them if it's coins for vir

They don't need to know because it doesn't matter and they don't care. They see it as you buying a digital item. It doesn't matter to them if it's coins for virtual slots or NFTs—it's all the same. It's up to you to figure it out. Coinbase could, conceivably, charge you through the app store and then process the transaction for you. This would be a nightmare to do and defeat the "purpose" of crypto, but it's possible. One of the benefits of Apple's enforcement here is their extremely generous refund policy. If you ever buy something by accident (or even on purpose, really, and just later regret it) you can ask Apple for a refund and it's almost guaranteed they grant it. Obviously crypto users don't really think about refunds because nothing is reversible… although who knows, maybe they do. Honestly, Apple and Google should ban ALL software crypto wallets. No one is checking to see how secure they are. A seed generated on a software wallet may appear random to the user, but there is NO REASON AT ALL to believe that it is, and no way to verify that it is. IMO every iOS software wallet is compromised simply by virtue of the fact that it's impossible to know whether the seed was generated securely. I 100% guarantee you there will eventually be a massive "hack" on a major iOS software wallet which is nothing more than the person who wrote the code intentionally making it such that they know how the seed is generated. It would be trivial to generate seeds that appear random but are based on nothing more than a passphrase you know and a timestamp that you can increment over, allowing you at any time to generate all possible private keys for every wallet ever made with your app. That app is probably already out there and people are using it, blissfully unaware that at any time all their crypto could just disappear. If the attacker is smart they can later patch the app, remove their proprietary seed generation and no one will EVER know. They can drain wallets randomly and everyone will assume that the victim must be responsible for the compromised seed, when in reality it was compromised on generation. The attacker will never get caught. I would be honestly surprised if this isn't happening right now.