FWIW, the world is evolving and the digital age has opened the doors for bad actors to operate. Firms and regulators need to stay ahead of curve in terms of AML, KYC, account protection and more. For a global firm like IBKR, it is even more complicated as we need to navigate the many different (and sometimes conflicting) global regulations.
Selfie - not all of our entities require a selfie but for many, the selfie allows the brokerage to comply with AML/KYC requirements and reduce fraud. In some markets it is actually a regulatory requirement unless an account is opened face to face. As you state you are in Europe, the selfie is one method of satisfying KYC requirements. The alternative could be video, in person face to face or maybe formal notarization which is very costly for the client and the firm to obtain/process.
As for 2FA, there is no way around it. For clients over $500K we can provide a physical digital device but everyone should assume their information is exposed on the internet and do their best to avoid fraud. The IBKEY which uses facial recognition is a breeze to use and is much easier than SMS and challenge type codes in my opinion.
Finally, the AML/KYC documents required when opening account are driven by regulatory requirements of the given entity in which the account is being opened.
