It has more to do with Microsoft deciding to emulate Google and Facebook's surveillance capitalism business model.
If you combine mandatory online user accounts with telemetry and Windows Recall, you have a system for building out advertising profiles linked to known individuals.
I get that. But it's also the case that they can justify this by claiming that they have to do it for each verification.