Ah, so they see the email notification, and then manually edit the reply-to with the person’s actual email because they know it?
Perhaps you should turn on private email (Don’t include content from posts or topics in emails for extra privacy.)
Then they’d have to visit discourse to see what it said.