> How they verify that is beyond me.

They don't. It's essentially an indemnification clause that they can point to as a copout if their service gets abused and a victim of that abuse comes looking.

"They said they had permission. We're just an innocent third party that they lied to. Go take it up with them." more or less