They might be preventing new malicious actors from signing up. Maybe. Catching a lot (anecdotally, from this thread) of legit users along the way.
Meanwhile, what have they done to catch and ban malicious actors who passed verification long ago and have been abusing other services on the internet from the safety of Hetzner's network for months or years?