It unreasonable to assume anyone could ensure his email is kept private the moment she shares it with at least one other entity. Rather than trying to fight wi

It unreasonable to assume anyone could ensure his email is kept private the moment she shares it with at least one other entity. Rather than trying to fight windmills, it's better to use unique emails for sensitive/high-risk purposes. That way they cannot be used as primary key. Company policy here is to never register any company account under a generic <admin@company.tld> email but use a partly randomized email for each provider <provider-xyz-123@company.tld>. That way no one can use one leaked email to even identify other services we use (think reset password/login dialogs leaking information about an email being registered or not).