Because they've flagged her account on their servers.

Maybe it just triggers some kind of ‘do not pass until’ function, if so then no way round, unless you’re a shadowy super coder of course.

Sounds like Substack was lazy and once it flipped the needs to verify flag it would not clear it.