I've just tried the most recent release, i.e. 3.0.3. setting up $closeRegister=1;
and I am 100% sure there no confirmation or stuff like this being sent. When this option is set, on the registration form, the "Password" field should not be visible to fill in at all. The password is generated properly, using the random characters, and then it's being sent to the new member's email address; at this time, email_user_register_eng.txt
template is used, which by default doesn't contain any password and should not contain. Receiving confirmation email, and that way also receiving the password, the member could then use this data to log in; optionally change the password later.
I am not sure where and how you're getting the "confirmation link" and what files did you modify for this. Default version does not have
even if user write wrong information in registration form and is not permitted to made any post his data (including email) is registered in database.
Sure, even if you set $closeRegister=1;
all accounts will be still registered in database (else how to validate them and what to validate? If you have some other ideas regarding the default approach, you are welcome to spread them up). Specially, if you don't have the Captcha module, it's quite risky to open them that way.
It is very up to you what you do with un-validated accounts, each forum may have its own terms regarding this. The most popular way is to set a crontab script, which will remove an account if it was not used for some time; but this also depends on your server's configuration, the possibilities you could set up and we don't provide such script by default, of course - either you need to order it, either program on your own. Actually it's very simple in terms of coding, but as I wrote, it very depends on the server you run this all on, and on your customer's requirement.