Not good behavior, but now that it’s identified, note that you should be able to write a trivial pre-tool hook that matches your email and blocks it from leaking externally.