You're so right and never thought of it like that! If you Google and find a new service you've never heard of, we're expected to give up our soul in a heartbeat! Even for a new email so many are like:
First name
Last name
Phone number for dual authentication
Install this app for dual auth
Birthdate!
Like dude, there are a lot of services that just that information alone is enough to call in and take my account. It's so scary how common that is.
A game I play uses PayPal as the payment processor, and pay pal decided to pay this specific company I had to upload the front and back of my ID.