They say they do the verification for "security reasons", which is a lawful basis and accepted justification under GDPR (it helps them control abuse and make ba

They say they do the verification for "security reasons", which is a lawful basis and accepted justification under GDPR (it helps them control abuse and make bans stickier). You assented to it when you signed up.