It would be legal if there was a law making it so, just as GP suggested. This is trivially solvable if creating an account required an in-person verification,

It would be legal if there was a law making it so, just as GP suggested. This is trivially solvable if creating an account required an in-person verification, like when you go into a bank to open an account. Since it's not mandatory, anybody who does so is beaten by anyone who doesn't (worse is better). So we should make it mandatory.