In general, yeah, but in this case it was specified that it's a recruiter filter. So it's like responding to someone's post that says `myusername [atsign] mydomain [dot] com` with the syntactically easier to harvest version of the email. Obviously undermining someone's explicit privacy preferences. Not unlawful but just selfish.