[zan]

There are more ways to resolve this.

- Netflix shouldn't charge cards without verifying email addresses. Security should be an integral part of UX, and not subservient to it.

- Individual email address canonicalisation/resolve _could_ actually be a standard. I'm not sure whether it is or not, but if we can agree on emoji we could also maybe agree on something that binds the internet together. Email is infrastructure, Netflix is not.

- There is still a potential issue by having configured catch-all email addresses on some domains, but we should in that case optimise for the hundreds of millions of gmail.