When change of email or is requested it needs to be approved by old email address!
My account recently got hacked and whoever took it over changed the email address. This could easily be prevented by requiring the old email address to approve the change
2
votes