To protect against users creating a new account each month.

To be fair, though, I’m largely in agreement with you in this case. For products like cloud infrastructure, where the company is fronting real costs, the requirement makes sense to prevent abuse. But this product has low marginal cost per user, and also loses all of its value if a user recreates his account.