WHAT YOU CAN DO
How to protect yourself against IAPs
■ Turn off IAPs on your device and require a passcode (not the device’s passcode) to turn them back on.
On an iPhone or iPad, go to Settings, tap General, then Restrictions, and then set an unlock code. Also, scroll down to the In-App Purchases switch and slide to off.
■ Put the device in “airplane” mode, or otherwise turn off internet access.
■ Require the account password whenever any purchase is made (be it an IAP or a new app).
■ Put your app store account on a gift card instead of linking to a credit card, so any download damage is limited to a specific amount.