I honestly feel that in the past, ECA and language score reports were required to be uploaded, but that's not the case anymore.
It's just so much easier and safer for them to fetch this data directly from ECA and language score internal APIs using the number we provide (no authenticity check...