Even if they would be a legitimate company they would need to understand that in this market they are not buying but selling.

So apart from blatant privacy issues - way too many hoops.

Scam either way, stay clear.

(the hiring dynamics described in this article are basically valid for all devs in the current market - pretty much everywhere - don't fall for anachronistic HR schemes: https://hiringengineersbook.com/post/trouble-hiring/)