Surreal DB - Sign up doesn't validate if user already exists and sign in works with any random credentials? - surrealdb

Question

I have created a scope as follows:
CURL POST /sql:
DEFINE SCOPE user SESSION 1d
SIGNUP ( CREATE user SET user = $user, pass = crypto::argon2::generate($pass) )
SIGNIN ( SELECT * FROM user WHERE user = $user AND crypto::argon2::compare(pass, $pass));
then I Signed up as following:
{
"ns": "test",
"db": "test",
"sc": "user",
"email": "tobie#surrealdb.com",
"pass": "some password",
"marketing": true,
"tags": [
"rust",
"golang",
"javascript"
]
}
Here I recieve:
{
"code": 200,
"details": "Authentication succeeded",
"token": "eyJ0eXAiOiJKV1QiLCJhbGciOEQiI6InRlc3QiLCJTQyI6InVzZXIiLCJJRCI6InVzZXI6czFiN3JzcnlxNW9jdDVmM2FrdHEifQ.oy7ox2QCqNDAyZnvRmGPoU2t3QmzB38J67ynpRVPfd8nXfRw0RQPunQ04KTrtzfQeNHB5Zv8-nN0HrOuqxG78w"
}
After which i try to sign in:
{
"ns": "test",
"db": "test",
"sc": "user",
"email": "tobie#surrealdb.com",
"pass": "some password"
}
which succeeds:
{
"code": 200,
"details": "Authentication succeeded",
"token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpYXQiOjE2NzIwMzc4NTAsIm5iZiI6MTY3MjAzNzg1MCwiZXhwIjoxNjcyMTI0MjUwLCJpY-l8cGbHeW72CbBIswIro-Tlan-QZuJFHVTIhUCP-1k1m-z8-YM7JYbXWT9IgPskKgzRDCJSt6iXmV-jw"
}
however when I do:
{
"ns": "test",
"db": "test",
"sc": "user",
"email": "tobiedsfds2#surrealdb.com",
"pass": "some password"
}
As you can see I added some random characters in email which is not signed up still I get a 200 response. And similarly when I try to sign up with a duplicate email, that succeeds too.
Any explanation that could possibly help to understand what's happening here?