Ask for additional information to verify before changing email address

All the information I was asked for (to change my email address within my ultra.cc account) can be easily found within the ultra.cc account, so if someone were to hack into it, then they would have access to all of that.

It may be worth it to ask for additional information. Like asking that a specific (random) passphrase be sent to a certain discord channel that is associated with the account (maybe that doesn't allow non-staff to read past messages, but staff can see it all), sending a verification email to the email address on file, or having a backup email address within file that requires some sort of verification from that.

I understand that there is a slim chance that would happen, as this is a paid service, but always better to be safe rather than sorry.