FYI: The json that powers the ajaxy interface includes pretty much their entire users table, including email address. When they first launched the hashed password was also in there, but at least they fixed that.

So their claim: "your email address is not even available to be scrapped up by a bot when the web page loads" may be true only in the sense you don't even need a bot to scrape the emails.