Doesn’t it verify, if a custom domain is involved?
For example, if someone uses joe@whitehouse.gov it’s a verification that it’s a legitimate WH account. No?
Discussion
Not really. How do you trust the custom domain? It depend on what the domain is, what their process for verifying someone before adding an account there is, and how much you trust the username part and the domain part without verifying it yourself.