Just make sure the (canonical) email address is not the primary identifier for the user, as email addresses may change over time.