No, the email header sent by abine when they forward the email from 23andme. That contains their real email address in plaintext, and might also contain the mas

No, the email header sent by abine when they forward the email from 23andme. That contains their real email address in plaintext, and might also contain the masked address; if not, a timing attack given the time of 23's emails and the time of the forwarded email might work. If the actual email is unencrypted, then the NSA gets everything for free.