Yeah - that's fine. We should be able to change the description text.
On confirmed being mandatory - I have seen some cases where an obviously real user (based on username/ description being background based) didn't have a confirmed email address. There can be lots of reasons that can happen - so I'd rather not make that mandatory.
A also agree that the spam registrations come in "waves" and things were really heavy in November-early December. Who knows? Fingers crossed!