...should be treated as comming from an unknown user,
not from some user who's real name happens to match the
one name given in the e-mail's from-field.

This will not increase the security of the tracker too
much (mails can still be forged), but at least
'accidental' takeovers are stopped.

Regards,
Tobias