Anyway, it's what I was told when I joined Google Ads a long time ago and it seems consistent with their philosophy and behavior.

So it sounds like their policy of having a high bar for proving identity but still publicising what is required to meet that bar works for preventing fraud?

If anything, your argument is an indictment against Google.