because there are other sites/apps online too, and it's better to decouple the "obtaining the verification" and the "presenting the verification"

and if sites and apps don't need to be in the loop for this they can't end up leaking all over the 'net