Kraken is a cryptocurrency exchange so it's plausible that someone's years-inactive account actually is worth a small fortune (to the customer, and to any hacker).
More importantly it's worth a small fortune to kraken if not claimed by the customer.
Their financial incentives aren't aligned with customers.
Ahh, escheat, a word I just learned on here yesterday. haha
Ok but how can they check that you "login to zoom from the same IP"?
And that's my concern. I can't remember if there's a fractional bitcoin sitting around in a kraken wallet. Even if it's 1/10th of a bitcoin, that's enough to spend a little time trying to get it back.