How are Laracasts protected from fake emails?

There are modern anti-bot solutions, such as "invisible recaptcha", that works behind the scenes.

Providers like Cloudflare also offer advanced bot-detection services.

The reason email verification isn’t needed is that bots can be programmed to accept and confirm validation emails, so it’s not a reliable safeguard.

Modern systems have become much more effective at detecting and stopping bots without relying on that extra step.

Finally bots on this platform might get easilly flagged, and afaik you need to provide payment details to get an account (?), so that also negates the need for email verification.

We don't require email verification to register on the site, but if you want to participate in the forum, there is an email confirmation step.

But, like @georgijg mentioned, even that doesn't provide total assurance. We do our best, and have a handful of steps to detect bots on the forum.