Adding email after account creation doesn't require verification

[bcspragu]

I have an identity schema like this:

identity.schema.json

{
  "$id": "https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "Person",
  "type": "object",
  "properties": {
    "traits": {
      "type": "object",
      "properties": {
        "username": {
          "type": "string",
          "title": "Username",
          "minLength": 3,
          "ory.sh/kratos": {
            "credentials": {
              "password": {
                "identifier": true
              },
              "totp": {
               "account_name": true
              }
            }
          }
        },
        "email": {
          "type": "string",
          "format": "email",
          "title": "E-Mail",
          "minLength": 3,
          "ory.sh/kratos": {
            "credentials": {
              "password": {
                "identifier": true
              },
              "totp": {
                "account_name": true
              }
            },
            "verification": {
              "via": "email"
            },
            "recovery": {
              "via": "email"
            }
          }
        }
      },
      "required": [
        "username"
      ],
      "additionalProperties": false
    }
  }
}

The idea is that users register with username/pass, and emails are optional (only required if the user wants recovery. This mostly works, but I've noticed the following discrepancy:

• If entering an email at account creation time, the email verification flow is triggered
• If adding an email via settings after the account is created, no verification is required

I wouldn't expect when the user adds the email to change the fact that they have to verify it. I can confirm that the email can be used for account recovery in both cases. I'm running on self-hosted Ory Kratos.