Account email is set from the login and is read-only for everyone, including admins, so the address on an account is always one its owner has authenticated with.
Invitations match people by a secure internal identifier rather than the raw email address.
Being invited or promoted to admin enables passport access automatically, and removing admin removes it, so the two are managed together.
Learn more: Invite a Team Member