When a user replies to/creates a topic by email, moderators are able to see the user’s email address in the headers despite them not being allowed to see emails in the user panel (with seemingly no way to disable this without using css). It doesn’t appear in action logs either.
If this is an important issue, turn off reply via email.