The premise is that you can make spam filtering and bot filtering and circles of trust work if you have a finite amount of accounts. Currently on the internet there are infinite accounts. If there's only a billion accounts, filtering becomes much easier.
No idea how world coin is supposed to work.. but couldn’t they get their account back by scanning their iris again? Like, I’m guessing you’re not supposed to have to scan your iris every time you use your account. But can’t the iris be like a “I forgot my password” mechanism?
AFAIK, nope. If that was the case there would be no point in buying anyone's account. If you stored value in it they could always use their iris to get into it.