Identity validation doesn't mean public real name. It means that Twitter has my real name so I want to create 1,000 spam accounts, it can internally see they're all one person. They could then trivially enforce a per-identity account limit, prevent trolls from re-signing up a thousand times, etc.