unfortunately nearly all sites I've been on operate under that policy tbh :/
the argument always goes that its hard to prove people offsite are who people claim they are and evidence can be faked too easily. i would hope with something as serious as doxxing though staff would do more to protect users but shit i've seen people get away with more nefarious shit on other sites because it was all offsite