In a separate response to the app scams, Apple has introduced Stolen Device Protection, which makes it harder for a crook to gain money through a stolen iPhone. When an iPhone is removed from its usual location, sensitive operations such as changing passwords are only possible if the user meets certain requirements, such as Face ID or touch ID.  Directions on how to enable Stolen Device Protection on iPhones can be found here.