It has more to do with Microsoft deciding to emulate Google and Facebook's surveillance capitalism business model.

If you combine mandatory online user accounts with telemetry and Windows Recall, you have a system for building out advertising profiles linked to known individuals.

I get that. But it's also the case that they can justify this by claiming that they have to do it for each verification.