When a Lead is already Qualified, do not allow its Email to change. Email changes for leads in other statuses are allowed.
Keep the trigger bulk-safe. Do not run SOQL or DML inside a loop.