A major Gmail update lets users change their primary email address, prompting security experts to warn about old, exposed inboxes.