The entire point of the nonce is that it can't be predicted by anyone but the client, proving that the client initiated the transaction. This is done by having the client send it over TLS and having the identity provider sign the nonce as cryptographic proof.

Also, by my reading, the problem is that the standard requires the nonce parameter to do something and Apple ignores it.