So they could have replaced it with, like, email verification or something, but they instead stuck to the design that lets governments identify all users?

<Insert rampant and unfounded speculation about FBI compromise here>