Deleting an account should need multiple varifications through staff. Like ip checks, email verification, and more.
They should have email changing verification through email, not staff. Staff take a while and a lot of times it doesn't work. Maybe create a system to make the process easier and more efficient.