neither do things like username, email, password, etc.. all sensitive information should be updated explicitly