Suggestion: Currently the local part of the email and the management URL are the same. They should be different (and the URL should be treated as a secret). Im

Suggestion: Currently the local part of the email and the management URL are the same. They should be different (and the URL should be treated as a secret). Imagine I'm a mischievous newsletter publisher who doesn't like the idea for some reason: What prevents me from finding all subscribers with XYZ@kill-the-newsletter.com addresses, and then deleting all of them by visiting https://kill-the-newsletter.com/feeds/XYZ https://kill-the-newsletter.com/feeds/XYZ, or reading all other newsletters they are subscribed to by checking out https://kill-the-newsletter.com/feeds/XYZ.xml https://kill-the-newsletter.com/feeds/XYZ.xml ?