If you get hacked, then you're a !@#$%^&* bag and you probably deserved it. There needs to be a way to change the email. Not every person in the world uses the same email for 5+ years. It should take one week for the email change to go through, that way, if your name gets stolen, you have one week to realize it and get it back. This would, however, pretty much slaughter the idea of name-trading.