Joomla 3.6 has two different controllers intended to create a new user:
defined in components/com_users/controllers/registration.php and
defined in components/com_users/controllers/user.php
Looking at their source code, both the methods looks like very similar, and do the same job.
Nevertheless, while the former is used for user self registration, it seems that the latter is not used anywhere.
I just want to know whether UsersControllerUser::register() is actually unused code or no.
I'm a bit worried since even if it's unused by the Joomla views, the task is still callable by a malicious request.