When updating an email address it is important that ownership/control of the new email is validated. This must be done in order to prevent impersonation which could lead to privilege escalation.
Implement email validation flow for updating email addresses.