As the article mentioned, adding 2FA is solving the issue.
... and I say this as a vigorous proponent of second factor authentication.
The real fix here is to completely change how the service handles email addresses. You can continue to request it, but it cannot be used as an identifier until it is confirmed.