Earlier quoted context omitted.
We don't move money around or even have private messaging. If the stakes are high enough, users need the service provider to be skeptical of all client processes, because the risk of being impersonated is born, right or wrong, by the user.
If you move money around then the legal system already exists to deal with fraud. As someone who doesn't use an iphone it's really frustrating that online services are starting to expect one for this reason when it hasn't been necessary in the past.
I also wouldn't be surprised if there was a burden of "good faith effort" required to show that you've taken measures to prevent frauds.