It is intended, see the announcement: Send a Personal Message to an Email Address
This is true of most platforms that have an email invite system, is there any additional risk by using a Discourse PM instead?
You can disable the feature by turning off the site setting Automatically create staged users when processing incoming emails (because sending an email from a PM requires the creation of a staged user)