I think you're being too dogmatic about this. For me it's a perfectly valid use case for identity verification. It prevents a big problem and only affects an extremely tiny subset of users.