I don't understand how someone could sign up for a site with [email protected] in this example. That person would never receive email from the site (like a confirmation), because the [email protected] owner would receive the confirmation. Doesn't Facebook require confirmation before the account is created?