Authentication - its Apple and googles way of knowing that the card is actually issued by a known app developer, linked To a real financial institution with the right relationship with a card network. Bc the AppStore is locked down Apple can do it this way more easily than on the web.