- post text into the "About You" editor box at his "Personal Details".
- "follow other members"
- enter geographic "location"
IMHO, this should not be allowed for users which are just "Guests" and did not confirm their registration yet.
So currently (XF version 1.0.4) users are able to do quite a lot of things without even confirming their e-mail-address via confirmation e-mail.
As per my understanding, unconfirmed users should not be allowed to do anything on my forum until they confirm their registration.