The way I read it, the password might not have been different for each new user... But that's negated completely by the next part about there being a sign up w

The way I read it, the password might not have been different for each new user... But that's negated completely by the next part about there being a sign up without any email verification