It also seems like somewhat reasonable anti-malware practices, for the most part. They want a government ID if you’re going to push kernel level drivers. They have a process for doing so.

Could have been smoother, such as allowing them to recover their existing account.