Instead of saying, “Oh shit, we should really patch up those holes,” like a reasonable service might, G2A responded by tracking down the user’s account and subjecting them to “stricter verification procedures.” What does this mean in practice?