As CMR suggests, if it's your email, simply change the associated password and check out availability of any 2FA tools. I would recommend SAML too - in fact; user-specific accounts more generally. How would a problematic change be attributable to one admin, if you needed to follow disiplinary (even criminal) processes, if there's no specific accountability?