So in exchange for not distributing malware they want my email address.

What could possibly go wrong?