What you are referring to should be called "confirmed opt-in", and it simply means that you don't accept an opt-in unless you can be sure it came from the owner of the mailbox in question, and was not forged. Making people opt-in twice wouldn't help with that.