For crypto, this is actually somewhat reasonable. I'm sure this sounds "dumb" to traditional users, but if you are a community manager of a cryptocurrency, you will probably have near continuous 7x24 attacks on you in an attempt to take over accounts or other similar BS. They frequently try exponentially harder on the non technical members because of the assumption that the people working on the tech are more likely to have 2FA etc, while "community manager" will probably have to click any link they get.
That being said, all of the entries on this site are for cryptocurrency/NFT/whatever, so that sounds about right.