All kinds of other problems follow from not verifying the emails, for both the person who owns the email account and the person owning the Netflix account. In a

All kinds of other problems follow from not verifying the emails, for both the person who owns the email account and the person owning the Netflix account. In addition to this kind of targeted attack: - When these accounts were active, I'd keep getting email from Netflix that I could not stop receiving. - In the first two cases, I could have done a password reset on the accounts and just started using them. The original owner would have to continue paying for it, since they'd have no way to disassociate the CC from the account. - In the third case the user didn't get the account back at all after forgetting their password (maybe no recovery phone number?). They lost all their viewing history and probably also ended up paying Netflix for service they had no way of using. From a technical perspective, this email handling is total garbage. The only persons winning are on growth hacker scumbags who get to write slides every quarter about how they lose no customers in the email verification part of the signup funnel.