An option to enforce email verification when creating an account should exist. This would ensure emails used belong to the folks using them. 

In System Settings > User Profile the primary email address field should have an additional option to enforce email verification, similar to how require confirmation exists now. This would prevent an applicant from starting or submitting their applications until they've confirmed they have access to the email they're claiming.  

While at it we should enable the Confirmation option on the primary email in the User Profile. It makes sense that this option is disabled on the submission form for the User Profile primary email field but it seems like an oversite to have it disabled on the User Profile.

I've highlighted the primary email field on this user profile screenshot and mocked up how the Confirmation and Verification options should be presented.