Amazon security flaw?

I was surprised to find out yesterday that you can change your Amazon email address without having to verify the change from your old email account. You only have to verify the new email address. That seems like a flaw.