Come on, they could still get a blood sample to really verify that its the user