2. if hacker change the email I must approve the changes to the original email, he/she must have access to the email before having total control of the account
Its not easy, most forum members do not actually have a valid email right now.
[/quote]
i don't think so because we know so the first register we have a valid email to receive email confirm .
if not we have message for they and they can update email then come back bitcointalk .
and last question "why not update 2 FA because it is best ".