Keep in mind each fallback/recovery option like secret question, secondary email address, OTPs etc. is an extra attack vector too. So would be good idea to stor

Keep in mind each fallback/recovery option like secret question, secondary email address, OTPs etc. is an extra attack vector too. So would be good idea to store that old email somewhere securely too...