> Unless a company has a legal requirement to "know your customer", e.g. a financial institution, this is a red flag.

Germany also has legal KYC requirements for web hosting and most other things relating to telecommunications.

And if those requirements include the need to supply passport information, that's a reason not to host in Germany.