I’m saying what is the incentive of asking for an email address if you don’t actually need it, as you have other forms of identifying the user, signed events.

Compliance is one of them. But it is not the only one.