Whenever there is a password change or an email change, they'll immediately allege that it is an account changing hands.
Not really.
Visit
Security log and how many of users have changed /reset their password. How many of them have changed/reset their password have accused of account changing hands?
As long as there's nothing suspicious (like changing posting style), no one is accused of account changing hands.