Financial Account Abuse via eKYC: The Hidden Design Assumptions of Digital Identity