When users triggers email change, we send a link to their new email address.
If user follows the link, should we only proceed with email change after authorization (being logged in the site), or we can just change the email like in the password reset flow?
We'd probably have to add a CTA button (perhaps reCaptcha) to prevent email link sniffers.
What other security implications could there be in the no-auth scenario?