> If a bot creates an account with someone else’s email, the victim gets one email, if they ignore it that’s the end of it. The welcome email and everything after it only fires once the user verifies.

As a user, I would prefer no welcome email at all.

I suspect everyone feels that way except SaaS providers. They could just give you a checkbox to turn the newsletter off, but they don't.

Yeah, thats part of why I hate "login with SERVICE". The big benefit would be not spamming me, but they always insist on getting my email.

There was a time were you would have to select "sign me up for your newsletter" then you had to uncheck it. Then you had to check to not get an email and now you don't even get that choice.

And lately? You have to go dig through your email because you can't set a password (looking at you Claude), so you can't filter email.

Then there's no verification step, preventing the entire mechanism of you not getting spammed.