Why Email Verification Matters and How to Do It Safely