Problem is that there is no KYC process before someone can adopt any orphaned package

Yeah, I don't disagree there should be more of a barrier, I remember being surprised I could just adopt things. Just explaining the intended use.