CAA has had airport security in its remit since 2014.
But its minimum requirement there is nothing stopping airports being more restrictive. So even if you call them out for talking nonsense they will just say its a local requirement.
They have always had a thing for previous pass holders. Changing company's based locally was always a huge pain in the bum. More hassle than the first application.