[easytiger]

> You don't need to confirm anything to change the email on your account! Not even click an email link!

Same with instagram. If you don't have 2fa on. I've had my account taken over and couldn't believe it. Utterly pathetic levels of security

[ubercow13]

You mean you can change the email without a password? Why would it be a problem if they require your password but nothing else in order to change your email?

[easytiger]

I'm saying its a problem to change the email without using an email verification link to do so

[croon]

What if you're changing email because you no longer have access to your old one?

[easytiger]

What legitimate scenario would manifest that situation?

That is a by far and away a tiny, minuscule, edge case