Sure, but it was never said to be purely an identify verification process. There have always been other requirements, some of which were not public. It's fair to assume that one requirement is to adhere to the T&Cs, although I can't confirm that.