Can't replicate, for what it's worth. I subscribe to multiple Substacks and don't get any emails from them other than posts from those subscriptions.
Then, to replicate the evidence for the shadow profile, try unsubscribe from any of them from a signed-out session. The unsubscribe page may show a shadow profile with the new address then.