They might not be a bank but there is a risk to the company if you, for example, start spreading malware or spam using their infrastructure. I assume that is the main reason why they want to properly verify your identity which in my opinion is fair enough. Anyway, other providers are available and I think the Fediverse and self-hosting in general are already too reliant on Hetzner alone.