2 factor authentication - 'Are you you?', 'Really?'
The only way I can see this working is if the second factor authentication (e.g. the SSN) is requested via the iTunes account that is registering - via a call to the associated iphone, rather than calling the number that the bank has on record.
This means all it can validate is that the person registering knows the information in question, it can't validate that the card holder is aware of or authorising the cards addition. This is made of stupid.