It is kind of astonishing to me that the entire chain of logic was put together without "The company could invest in better customer service to resolve disputed identity" as a third possibility.
It was certainly my first priority for an e-mail provider when I started to de-Google my life.
My reading is that this was included in point #7, i.e. access to the customer service is conditional on identity verification.