It's scary when you think about the context - someone you haven't added to your contact list, meaning anyone at any time, can find your current IP.

It's not exactly shocking, but it certainly shouldn't be able to happen until you've approved a person as a contact.