Even if it's not a legal name, are you going to review the CV of an applicant who used a different name on every publication they claim authorship of? It's going to be pretty obvious someone is being nefarious

Validating someone’s association with an institution by name seems like a reasonable thing to do. Perhaps it wasn’t done in the past, but times and circumstances have changed. Trust in authorship is lower than ever, and for good reason.