Thank you for posting your question. To address your issue, you are currently unable to prevent an unverified user from requesting password changes, but when the unverified user changes, the password is automatically verified. The only problem you may encounter is that the Welcome Email won’t trigger.