I hear you. Staff have mentioned they changed the way the confirmation works, and people have been complaining. Sounds like this is the same thing. I flagged this for staff attention, because you’re right. Nobody would click to confirm a WordPress.com account on a link that wasn’t from WordPress.com.