What are the implications of letting oauth2 users change their email addresses?

Product Support
2

They can change their email address in Discourse and then add the oauth2 on their preferences page if they click the “Add alternate Email” link.

I just checked and doing a Google auth2 login with my secondary address logs me into this account.