He is using Amber, we are checking this to see this happens without user approval. The usual case scenario is that the user can change his lightining address by change his metadata directly, or select a connected wallet and link it, or through a prompt that appears when you add a new wallet while having an empty lightning address in the metadata.

Other than that we do not override the lightning address without user approval unless we have missed something