Is the badge really that much of a requirement? I mean, if you have a fax machine, you must be a legit source to make that request.

serverHold status means registry, not registrar, hold - the relevant protocol (not WHOIS) has the registry as the server, as you'd expect. But you are right about GoDaddy and they are a strange choice.