That gives an eternity of time to a mischievous 2yo kid #3 to grab the shiny toy so carelessly dropped without being locked GASP! and then tap not just twice but >100 times.

See my hand wave remark. I may not have kids but am old enough that a few of my mates are starting. I’ll one if he thinks this series of incredibly unlikely events (that ignore lock after time limit, face ID for payment methods, common sense) would work with his child but I suspect the response will be laughter.

Far more likely is people giving these devices to children inappropriately and them figuring this stuff out rather kids “mashing buttons” into purchasing things from Amazon. Do appreciate the classic “yOu MuSt NoT hAvE kIDs” response to literally any form of parental criticism though.