If you send an email with an unsubscribe link, clicking that link should unsubscribe you. No: it should not require account login.
Follow
@matthew_d_green yes for not requiring login, but what about requiring POST instead of GET? Traditionally it has been a bad idea to modify state on GET. So GET serves a form with button, which results in POST and makes the change
