Later than any of the above,
Nestade left a DT “neutral” alert. It does not link to this thread. He seems to have removed it now.
Yes, I left a preliminary neutral trust saying:
Received suspicious PM by this user, additionally "This user's email address was changed recently."
(Feedback will be deleted/changed, as soon as there is more information).
and referenced a screenshot of the PM.
After doing more research and reading this thread I removed the neutral trust.
By the way: I'm not actually using the security-question-feature.