Hacker News Reader

Seems like that results in a different problem? Someone could take your email address.

Perhaps the new-user process requires authentication initially via email to confirm that you are in control of that address.

That is exactly how it's described in the documentation, yes.