I got the following very interesting email:
You might have noticed that I have kept the email address of the sender public. That is an important clue.
The email was sent from a public email gateway, one of those places where you have a disposable email address.
I suspect that there isn’t actually a bug, but that the system is working as planned
And there is this complaint: