One minor nit for the Githubbers inevitably lurking in the comments:

The confirmation message for [4] says that they'll contact you at [first email address listed on your account], not [primary email address listed on your account]. I hope that's just a display bug since I don't have access to the email I first created my account with (but want to keep it added for commit attribution). It's not listed as the primary email though, which is where I'd expect this kind of communication to route through!