The coinbase verification email says click to confirm or "If you did not sign up for this account you can ignore this email and the account will be deleted."

Curious that I am, after making sure the link went to coinbase and verifying the headers of the email, I clicked to verify the link in an incognito window.  Then immediately proceeded to reset the password on the account and poke around the account. I did find a session login from an Ipad and unknown IP in the security section, obv the creator of the account. 

I'm surprised coinbase does NOT  kill all sessions after verification for security.  Nothing else of interest in the account so I deleted/closed the account. But not sure what they were expecting....to keep his session open endlessly while I magically buy some bitcoin on an coinbase account I didn't intend to create, even then doesn't coinbase send confirmation links to email to withdraw...

 I know I can't check IP login on the forum I was hoping a mod can.