And, moreover, requiring a login or any personal information to unsubscribe is specifically disallowed by the law.

With the important exception of an email address. Most of the time the part that annoys me the most is entering that because at best I have to check what it was sent to (many email accounts all going into one gmail) and at worst, it wasn't sent directly to me, so I have to try harder.