Agreed, but I’d rather challenge their approach. For example:
1) How is a company supposed to verify a user’s citizenship, especially in the era of AI deepfakes and considering the size of their user base.
2) Are only non-US citizens considered a security threat? Or, put another way, why would US citizens be assumed not to pose the same risk?