> Pretty silly mechanism, since of course there's no email validation

I wouldn't want Claude interacting with email on my behalf in the first place. Presumably you could give it a fake one at setup?