Email change link doesnt expire

The link emailed for changing your email doesnt expire

Example: https://account.mojang.com/changeemail/c6ea973ae58546fc8e88f2ebb8e8ebb5

Looks like you cant change the email from there but it does expose the security questio s which makes phishing easier