Non-authenticated users can also post to this list

In theory, and then claim their accounts later ?