Its software, you still need to verify the pgp key, its email, you still need to verify where the email address is coming from and that they can read your emails to them when you reply, its the internet, you still need to be checking your links (or don't click them at all) in your emails.

"No need to verify" sounds like "Just trust us bro" which is terrible marketing