Email address can be changed to existing one in db
When a user updates their email address, they can change it in their Profile to one that belongs to someone else already registered (there's is no check for existing email). Zig mentioned this as an old bug he hasn't seen fixed.