How can someone have a legit trade, when the email can be changed after giving their btc.
What are you talking about? How can someone change the email back after its been handed over and email/pass changed?
Keep in mind I've been doing this for a year. If there were an issue of me somehow stealing accounts back I'm pretty certain you could find at least 1 buyer complaint posted here in this thread.