The hilarious part is, PayPal had the EXACT same loophole as Apple.
With Paypal, there isn't a limit in the app to how many times you can enter the wrong password.
And people can buy anything on PayPal if they find the password.
With iPay, you can only authorize one phone at a time to use that card.