The e-mail notifications about thread updates visibly contain the e-mail addresses of all contributors in the to field. I strongly suggest moving these to the bcc. At the moment it's a great way to harvest e-mail addresses from your website, a real privacy issue!