Allowing identity changes without requiring reverification to keep the "verified" status sounds like a problem with an obvious solution: Require revalidation, or remove the mark.

Having initial validation accessible is not the issue here.