Users should not be "doing things attached to their account" until their email is confirmed. OP's suggestion is just an extreme version of the same principle,

Users should not be "doing things attached to their account" until their email is confirmed. OP's suggestion is just an extreme version of the same principle, since it won't even allow people to set a password until their email is confirmed.