That looks like it's easy to work around:
1. Deposit from one address (your wallet) and verify ownership by sign message or something - do they even allow that?
nope, from what i saw on another thread, the address "verification" is done by a liveness check.
yeah, they seriously expect people to record a video of their face to verify wallets. what a fucking joke.
That's bloody stupid!
Why do they think signed messages were created?
Do they want people to record their faces holding their address on a piece of paper written on it?
They "pinky promise" to keep your verification data private, and yet this industry has shown that they cannot be trusted with private data. Anyone breaching this database and you are looking at robbery, kidnapping, or worse.