The most interesting thing I learned today is: according to TPG, most customers will only need to provide the last four digits of SSN to apply.
On the one hand, this seems great for privacy - you can't leak information you don't collect, right? On the other hand, does this mean someone can impersonate you with just the last four now?
And your phone with two factor authentication right?
Apple likely already has a relationship with the customer, so the riskiest accounts would be those that are brand new. But for even those, Apple would have significantly more information about the applicant than would be in a normal application (like the GPS coordinates of the phone).
On the one hand, this seems great for privacy - you can't leak information you don't collect, right? On the other hand, does this mean someone can impersonate you with just the last four now?