Right now, a user can change his email address without any verification. This could be troublesome if he makes any typos.

Have you considered adding an email-confirmation functionality for email address changes through the profile, similarly to email confirmations in the signup process?