Personal messages can be sent to email addresses?

It is intended, see the announcement: Send a Personal Message to an Email Address

This is true of most platforms that have an email invite system, is there any additional risk by using a Discourse PM instead?

You can disable the feature by turning off the site setting Automatically create staged users when processing incoming emails (because sending an email from a PM requires the creation of a staged user)

6 Likes