I think they do have to contend with legitimate fraud, and their automated systems simply can't deal with a true FOSS project where the people donating know precisely what they're getting into, and the developers are obviously not some gang from Nigeria