Verification links gets clicked by mail scanning software (for malware, I suppose) all the time - if the GET isn't followed by a POST - the account is flagged valid.