I think you should ask for signed messages before doing that, what if they were hacked? Ok, I am not going to tell you how to do your job, just please never ever change my address if I do not provide a signed message (from my current address), even if "I" desperately beg for it (I have never been hacked anywhere, but I would rather play it safe).