What does it matter that they didn't ask for a verification code when you bought the ticket? They do that when something looks different, like you're using a new browser or you're in a new location.

Websites and apps commonly require you to log in again when you haven't used them for some time period anyways.

These days, yes, having connectivity and being able to verify a code is just standard practice. It's just security.