I've seen a few services which do this as a matter of course. Sadly few allow the email address change to be rescinded without a customer-service call. By that

I've seen a few services which do this as a matter of course. Sadly few allow the email address change to be rescinded without a customer-service call. By that point, the account may already be in fraudulent use.