They absolutely are verification. If they weren't they wouldn't need to look up a json file on the supplied domain to provide a tick or cross (if failed to verify).

It's verification that a file and a field exist. That's it. It's not verification in the traditional sense of verification like on every other social app.

It can mean verification. For example, if you’re a company account, using a nip-05 from the company’s domain.