In case your IT folks are too dimwitted to know it, having to create an account drives people away.
Also the current system it provides no more authentication risk than a simple email verification, is no more risky, is no more manipulable. Well, a little more, those that stuff such things for a living, it would take them fifteen more minutes to punch through your current system than to fake out email verify.
It your infosec people have not told your this, they need re-education.
So, for people who simply want to sign a petition, switch to a simple email verification.



