“I regret to say that, but despite the flaws I explained above being obvious the support team ignores the issue.”
Dear Lapo4ka,
I don't know why do you think the support team ignores the issue. I talked to the support team, and they said, they double check all requests coming from second E-mail addresses, just as you suggested. Full automation is not possible, as many users change their E-mail addresses during time, and we cannot simple ban users changing they E-mail addresses. Anyway the support team performs deep security check before fulfilling suspicious requests, and the support team informed also you about this procedure via E-mail.
Regards,
tom