Can email change be disabled in Supabase Auth (even for authenticated users)?
I’m building an app with Supabase Auth and I want email addresses to be immutable after account creation.
Since the Supabase client API is public, a logged-in user can always call supabase.auth.updateUser({ email }) manually.
Is there any server-side mechanism (config, hook, edge function, etc.) to block or reject email updates at the Auth level?