On behalf of my friend whom I am currently talking to via Skype. Why on this God’s earth has Arena-net not implemented a system that you need to CONFIRM via email a change in email. If I have got this straight, you need only the username and password to permanently steal an account.
I don’t mean to be rude, but the pain and hurt that every single one of the people’s accounts who have been hacked, which is an act of CRIMINAL THEFT could have been prevented by any system in place that required a security question, an email confirmation, or could at least be reverted through a process via phone line in which they personally confirm their identity.
I absolutely love this game and this company for the product they have put out. But why in the hell have you allowed the weakest system of protection available on the internet to be present for your new blockbuster game. I am calling you out on this Arena-net. You have the power to fix it. Please do!
Edit:
IN SHORT:
Problem:
You do not need to confirm change in password or change in email. If your email get’s changed it sends your old email a message to the affect of, ‘Your email has been changed, I hope it was you.’
Question:
I’m sorry this is okay how Arenanet? This allows a thief to obtain COMPLETE control of your account, instead of having a security question or confirmation email to prevent account theft. Account theft (its entirely gone) and account hacking (my stuff is gone) are two different things!

