The most familiar flow: pick an email, pick a password, click a link in your inbox to prove you own the address, sign in. Familiar doesn't mean simple — securely handling passwords is a discipline of its own.
The verify email prevents someone from claiming an address they don't own. Without it, "forgot password" flows become an account-takeover vector.