[smhenderson]

They allow the creation of accounts without verifying the email, then refuse to admit it's their problem and do something about it.

This is my biggest issue with what you're talking about. I get annoyed at the clueless users who happen to share my initials and last name but I can forgive them for their ignorance.

But, IMHO, any company, in 2022, that uses email for authentication, or for any type of business/financial exchange of information, that doesn't bother to do a simple validation of "do you really own this email?" should not be allowed to continue to operate!

I sadly learned long ago that expressing this opinion to their support or security contacts is useless.