This needs to be addresses. I have just had an instance where I’ve emailed sesnitive information - not to my customer, but rather to the original email address of an email my customer had forwarded to me - as Hubspot had pulled this third-party email address, created a contact for it and set their email address as the default to reply to (as it had assigned the ticket to the new contact).