Is email OTP required?
No. Email and phone are stored as unverified until verification is enabled.

Can I search users?
Yes — by username, email, or phone, respecting privacy settings.