> CAs in practice don't verify who you are; they just verify that you are the entity that controls a particular domain name.

They do that at a minimum. OV and EV certs require more work and do verify who you are (for some definition of "who") and that's where the more expensive CA's add value.