DMARC-verified-sent from a legitimate [...] domain? -> Someone pwned a mailbox at an agency? I'm sure they would've spun the story into "the government was hacked, not us" in that case.
Or "sent from" a legitimate [...] domain? -> Spoofed envelope sender / FROM? Then Revolut's simply been had by the nose. If the domain is indeed a government domain, and does not publish DMARC records, then a due diligence check on who they're sending such personal info (ie, call that purported government agency up on the phone) would suit them.
After all, they're very pedantic about me running their app on a phone with an unlocked bootloader. I'd then hope that they'd be symmetrically pedantic about verifying whoever they're sending my info to.
Without specific arguments on what Revolut consistently does that no other bank (e.g. HSBC, wells-fargo etc.) do, you're just yelling at money shaped clouds.
And Revolut itself is particularly strict, receive 5 random unexplained payments and it's almost sure that you'll get banned and you'll receive the very known email stating that you must give them some bank info to forward your money somewhere else.
Many people also care about their privacy, exposing all your wealth, assets and history to a specific government doesn't sound really reasonable to me.
Also, Money laundering is easy to do regardless of the jurisdiction, in the US you can just setup an LLC for a "SaaS", add Stripe, get ton of virtual cards with crypto (no KYC possible), make XXX transactions = "clean money", taxed (aka laundered, legal money), arriving on your bank of choice. I'm pretty sure people that knows how to launder money (even a child could do it) knows how to do it without any sort of offshore bank, I don't really see how Revolut is aggravating this matter.
An estimated 3% to 5% of the world's entire GDP is linked to criminal activities. The reasons are complex (for example drugs --not my call-- are mostly illegal and drug consumers have a responsibility in enriching cartels) but all the banks of the world "enable money laundering".
I've got many friends who have a Revolut account / card and although I don't have one, it just looks like a nice app / interesting cards (for all the perks and cashback IIUC) to have.
Let's not mistake banks for tax authority, that's unrelated. Tax evasion and money laundering are two very different things, the latter almost always imply that taxes WILL BE PAID in the tax residence of the ultimate beneficial owner, just having money on a remote bank is not money laundering, people laundering money wants to buy properties, assets... you can generally only do so if you paid taxes. You can't buy properties easily if you just hide money somewhere.
To the contrary, someone laundering money absolutely does not want to show crypto as the source of funds as this is the most suspicious and might call for any sort of check. Generally speaking, it's easier to launder money without any crypto involved, you can just chain a few companies with nominees in different jurisdictions and just invoice each other and so-on, all done online without having to go anywhere.
To be clear again, people laundering money DO pay taxes, often a lot to appear as genuine as possible.
The ones that are successful at both money laundering AND tax evasion generally use very complex schemes that involve buying second citizenship, setting-up blurry structures... it's not done at a level of wealth that is Revolut compatible :)