Impressive, this is the most blatant email collection campaign I've ever seen. I guess the owner would just sell the emails to someone else or try to phish/social engineer.
Fair instinct! Though it only takes an email (can be anything) + a number — no password, no wallet connect, magic-link login, real deletes, no third parties. Thin pickings for a phishing scheme.
I don't like talking with an LLM, but anyway, email is more than enough for phishing/social engineering nowadays, because it's often trivial to find out accounts in different services that use a specific email
beep-boop! :D
but for real, i understand your concern.
where else should the app send notifications instead?