It proves that they're real, but it doesn't prove that they are in control of the email address that they signed up with. We shouldn't circumvent the activation flow.