I get emails from legitimate companies (including Wells Fargo, a major U.S. bank) meant for others, because they never validated the email address their customers gave them.

Email Address Validation is not "yep, that looks like an email address", it's "let's send a confirmation email and have them click on a link".

Please do NOT trust users when it comes to email addresses!