I’m not sure this is a bug. You don’t know what internal processes are in place to verify account ownership. Some of these checks might be essential to avoid bad actors, and it’s more than likely they’re working as intended given how many attempts you made with different support agents.