independent organizations can verify accounts directly. Bluesky will review these verifications as well to ensure authenticity.

But isn't it still one central entity approving?

It’s not ideal, and can be abused by the central service later by price increases or probably other things.

But it’s the best a corporate and evil platform can do to legitimize users.