Guys, I think sending out confirmation emails is quite useless.
With the captcha module in place, registration is really simple for the user and secure from spambots. Take a look at reddit for example, they don`t verify your email at all (you even have the option to no give it to them).
I`m quite happy with the way it is for 9.9. Well I might be saying this because I never got spammed, so it might be a whole different story once I do (hope not)