PayPal created an account without ID, they can close an account without ID. Using your logic, couldn't people just open a fraudulent account because they didn't

PayPal created an account without ID, they can close an account without ID. Using your logic, couldn't people just open a fraudulent account because they didn't present an ID? That is a much worse outlook. The account (email) that created the PayPal account is requesting it to be deleted, that should be sufficient. If both accounts have been insecurely breached, that's really the user's fault. PayPal could even mark the account as pending deletion after 30 days if we're really worried about this. You shouldn't be able to stand around and blackmail the user for even more personal information to sell or "accidentally leak" to advertisers under the guise of "security."