you can validate the new email and if you want to be extra secure you can send validation to both old and new email - all automatically. It's impossible that a hacker would get access to my snow, and my old and new email at the same time. And if they do, then sending an email isn't better anyway