I'm guessing they treat the first login via .onion as a new location and require some additional verification but subsequent ones as if they were coming from a

I'm guessing they treat the first login via .onion as a new location and require some additional verification but subsequent ones as if they were coming from a known location. They could achieve the same by just treating all exit nodes as the same location but this looks much more elegant to me.