Personal information.

Email changes require verification.

Changing a security-critical identifier starts a verification flow before the new value becomes active.