You are making a point here the organisation needs to get a legal backing which I believe it would be a safe guard for them while rendering services so that they don't fall into trouble of being apprehended by security agency for what they have no knowledge of. But I believe they would have to let whoever is patronising their services to sign an undertaken that such wallet they are presenting to them belongs to them and if anything otherwise happens while in the process of recovering the keys, they the organisation wouldn't be held responsible but the person who brought the wallet to them claiming ownership would be made to face the law as the case may be and according to their agreement as signed by both parties. I think this is for both to understand.
Yea getting a legal backup is nice especially when it comes do with something as Delicate as the service they are rendering, wallet recovery service is not a joke in the cryptocurrency space because anyone can decide to act funny and I think thats why it is very much necessary for them to get a legal backup, the advice yiu gave in terms them presenting a paper to their clients tthugh their attorney to signed in case of any funny move by their clients, the signed terms will put them on safe side, even though their client decide to play smart by presenting a wallet that's not there own for recovery, the terms the consented to will rope them in if there should be any issue at the end, so it is a welcome idea for them to get a legal backing to this effect.