If untrusted new users without a password don’t pose a threat, then I don’t see why their sign-up process should be slowed down. I conclude: there is no reason to require a password at sign-up.
If untrusted new users without a password don’t pose a threat, then I don’t see why their sign-up process should be slowed down. I conclude: there is no reason to require a password at sign-up.