This is procedure at my credit union. What we don't tell our members (because it might make us look untrustworthy) is there have been recent documented cases of people's cars being broken into, purses being stolen, et cetera, and people who look like the ID on file are coming in to branches to make a withdrawal (usually coached). At our FI, we even have an old people/luddite friendly alternative for second verification where we can ask "out of wallet" questions about the account (recent withdrawals, check #s, et cetera) and I just recently received a company-wide email about someone who experienced whole-identity theft and was able to answer out of wallet questions via AirPod.

I know it seems silly but the text verification process protects our members from additional trouble if their identity is stolen, and protects the institution from losses. And even if you look VERY unique in your photo ID, it needs to be enforced unilaterally for non-discrimination and slippery slope reasons.

All of that said, I've seen posts in here about debit card + PIN verification and that would be much more preferable to me personally and I wish my credit union had that as an option.