hey @Chimanos yes that is correct. For login methods which do not already verify emails, first the sign up and session creation process is completed, and only after that the user is sent into the email verification flow.
For other login methods like sign in with google, passwordless, where the email is already verified during user creation, we first create the user -> mark their email as verified -> create a session.