100-fucking-percent this. Maybe it won’t be enough, but the wailing about verification without even doing this as a first step is maddening.
I don’t know, I think a pretty big proportion of the folks with a genuinely pressing risk of impersonation have either a personal or institutional domain available to validate their identity. The main categories are “actual celebrity” and “professional link to a publication or company.”