To comply with CAN-SPAM mailing list unsubscription can't require a password, which means there's negligible security on it. Sending an email confirmation acts

To comply with CAN-SPAM mailing list unsubscription can't require a password, which means there's negligible security on it. Sending an email confirmation acts as a safety check that person unsubscribing actually is the email account holder.