orlangur
commented
5 years ago Having to disable this module via CLI is extremely unfriendly especially considering it must be forced in order to avoid superfluous "error" messages, in addition it is not always possible to access a CLI in order to disable a module, this functionality is vital to adequate site deployment.
If Magento_Newsletter module can be disabled, there is nothing to add here, we should not duplicate existing functionality in Admin UI. It sounds exactly like a deprecated feature Disable Module Output which led to a lot of bugs when condition like if (isModuleEnabled('Magento_Review')) was forgotten.
Captcha addition looks like a reasonable feature request to me.
Description (*)
Make it possible to disable the newsletter functionality entirely via the admin backend for those who do not want/need it and add optional CAPTCHA integration to the signup for those who do but also require some security.
Expected behavior (*)
An on/off toggle in the Stores/Configuration/Newsletter section of the admin backend would allow site owners to disable or enable newsletter functionality entirely, thus removing it from the frontend.
An additional option to enable CAPTCHA in this section would not go amiss for those who want to retain newsletter capabilities but also require security and surety that the email addresses being used to sign up are indeed legitimate.
Benefits
Many spam bots use the newsletter signup to spam email addresses, this can mean your server sends out thousands of newsletter subscription emails to people who have no idea my site exists and never signed up for it.
This unsolicited email behavior is illegal in many countries and in severe cases could lead to legal repercussions!
These bots can also spam non-existent email addresses forcing bounces negatively affecting your email ranking and server load.
Additional information
Having to disable this module via CLI is extremely unfriendly especially considering it must be forced in order to avoid superfluous "error" messages, in addition it is not always possible to access a CLI in order to disable a module, this functionality is vital to adequate site deployment.