Why Coinbase verification trips up experienced traders — and how to treat login friction as risk control