Do not need to be authorised to delete a Pod

To delete a Pod, a Solid user:

1. Goto https://PodProvider/account/delete
2. Enter a WebID on the PodProvider
3. Receive a 'Delete Solid-account request' email at the associated email address.
4. Click the delete link in the email.

At no point in this process do I need to be authorised, so as long as I have access to the email account I can delete a Pod.

I would expect the Solid user would need to be authorised at some point during the process, maybe after the delete link is clicked.