Just ran into the same issue on Discourse Meta (the current forums) when I use security key to authenticate the email address change. It doesn’t happen if I use a 2FA code though. Haven’t tested with backup codes.
2 Likes