I have to explicitly approve every install and purchase on my kids' iPod Touches. I don't know if they would need a fingerprint on my phone to be able to spend money there, but I assume all the tools are in place to control this sort of behaviour. Apple really need to make it clearer and easier for people.