Please consider validating the email when it is change in the user account. Similar to the "Registration Account Email Validation". I believe that if someone hacks your account and try to change the email, you get a validation and confirmation link by email to confirm this change.
For security reasons I think this is the correct approach. Many sites like Twitter and Facebook uses this approach.