at least it is some accountability. i've recently gotten marketing emails from box.com that require a auth code to opt out. i'm not sure how that is legal
Seriously, it's ridiculous. There should be a one-click unsubscribe link at the bottom of every marketing email. You get click it, the email is immediately removed. None of this "please confirm your email" or "please wait ten days for processing" bullshit. Nobody is forwarding your marketing emails. It's not unreasonable to expect ESPs to generate the list at send time and not two weeks in advance.