Unsubscription by email to list-leave doesn't require confirmation.
In testing various email commands I inadvertently sent a message to the list-leave address from the wrong address and was shocked when the address was removed without confirmation.
Apparently anyone can unsubscribe anyone else by spoofing their address in a mail to the -leave address.