I have come across a very frustrating situation where I received an email saying my email address was changed.
It was written in email that I only have 72 hours to revert it back to original.
I contacted support and they said someone could have guessed password. I mean seriously? I'm a cyber security professional and we'll aware of complex password norms. There is no way someone can just guess my password and submit request to change email address.
I have seen the same thing has happened to multiple such users in past as well and their watch was locked because they missed the email for 72 hours and the email was changed.
I believe there is something wrong here with security which is letting someone place request to change email of a user's account.
