This makes no sense. Only 1 person can receive the email with or without dots. How can this be taken advantage of when you have to login on netflix to update your card details?
You don't have to login to Netflix to update your card details. Since the link you follow is coming from inside your email account, effectively Netflix considers you to be already logged in. And we are arguing that they should not.