in my experience it’s pure PR bs with no teeth in response to public pressure. Getting past the code verification is trivial in stores. Employees do not enforce verification at all or even when they do a decent fake id would easily defeat it since tmobile doesn’t bother sending a 2fa verification to your device.