Sounds nice in theory but in practice it would be nice if the site admin had the choice. I'll have to look at views to see if it's possible to exclude people who haven't logged in from the user list now that I know what the issue is.
Newly created users should not show up in publicly visible user lists until they've actually accessed the site. I think that's how it used to work before the patch.