If you have any kind of non-tech savvy users, it's a terrible practice, as you would be flooded with support requests on how to get into their accounts with no way of verifiying the actual owner.
yes.. even having an unconfirmed email address can get really messy when you need to get in touch with someone but just can't because the address is invalid