Google does the same with phone numbers. They ask for a number as a way of verification you never gave them in the first place. It does not make any sense.
Imo if one can log into an account they should have the right to request a delete/download for all associated data. Considering PII could very much be involved self service would even be better.
Imo if one can log into an account they should have the right to request a delete/download for all associated data. Considering PII could very much be involved self service would even be better.