to_addr - stores the sender's email instead of a valid user_id. This allows any email address as the sender. Why should we allow that? Why shouldn't we?
from_addr - stores a TCL list that contains the recipients name, email and user id. Shouldn't the user_id suffice? This relates to the previous question. My impression was that acs-mail-lite can be used for sending any email, not necessarily to or from registered users. You'll have lots of instances where you are sending email to people who are not necessarily users on the system; a banal example would be a "Send this to your friend" feature where a user can type in an email address and something will be sent to that email.
