You mean that right now the user can input any email address and s/he will be logged in? There is no 2-step process or confirmation email?

I was not aware of this limitation of Hotspot system. Together with the lack of a Google login, this is potential game stopper for me 🙁