Forgery is a non-issue -- this guy is a season ticket holder. Literally all they need is his government ID checked against a list.

The "problem" they were trying to "solve" is letting people sell some of their tickets to third parties, but not all of them. That is understandably how they arrived at a mobile application as a solution

But the problem of admitting the original ticket holder is simple as shit. Just .... check his ID?