OAI is a big fat lawsuit target, plus they can restrict it and still make the money because odds are they'll also have it on API, and someone could verify for the API then offer a wrapper around OAI with less stringent ID verification.

OAI ultimately still makes a ton of money, and gets to wash their hands of much of the liability. It's a win-win.