that does nothing for site security, and actually puts individual users at a higher risk as now their email is now an attack vector