The activation is done by the user. It’s a double confirm, meaning they subscribe and then have to confirm the subscription. If they are not activated they haven’t confirmed. Feel free to delete these as they are just taking up database space 🙂
BTW, I just deleted all the spam subscriptions, in case you were wondering where they went.