You talk about the e-mail confirmation, but I know it would be easier for spam bots to come on, why not turn it off. And if you are truly worried about spammers, turn on Admin Confirmation, but if the e-mails are seriously fucking up, than probably best to change that setting.