Brute-forcing email addresses doesn't seem particularly hard, and a mechanism like that would then allow checking for email address validity and corresponding URL.