The devs that write malware are typically in a different jurisdiction, and how can you prosecute them if they're anonymous? That's what this measure does! The

The devs that write malware are typically in a different jurisdiction, and how can you prosecute them if they're anonymous? That's what this measure does! The moment they use IPs to find devs and prosecute them , every malware dev will just use a vpn or Tor. or just use a compromised device to route their connection. This is a long running cat and mouse game. Criminals care about laws if breaking the law is difficult, because laws have consequences. ID verification isn't as simple as "hey, it's an ID, all is good", and now you're on the hook for the much more serious crime of faking IDs and defrauding. It doesn't need to prevent all criminals, it just needs to be a good enough measure that it reduces the amount of abuse significantly.