Obtaining user's email id even if email is not verified

Nope

Edit: as in, if the email address is unverified and therefore not in the auth response you shouldn’t trust the user since they have not verified

1 Like