Gandi will suspend your domains for no reason and hold them hostage until you provide photographic ID proof, stay away.
Some evidence, please.
But the GP's story is about identity verification; I don't see that as a particularly egregious "shenanigan".
Would maybe be defensible if they asked for actually verifiable information, like a dump of the cryptographically signed contents of your chipped passport (haha).