Uh ok... so if you don't take their email address... how do they reset their password when they (inevitably) forget it? Or do you mean they can put in whatever

Uh ok... so if you don't take their email address... how do they reset their password when they (inevitably) forget it? Or do you mean they can put in whatever email they want and you'll accept it? Because if it's the latter, then you've just allowed them to cause you to spam whoever they feel like. You have to verify email addresses. There's no other way to recover passwords. And if your users value their specific account, then they need to be able to get into that account, even if they forget their password.