So does Automattic with gravatars (on nearly 20% of the internet, no less), and pray tell how many other companies that use md5(email) as a unique ID for a reason or another. Duh! What were they thinking!
I don't know what they were thinking. It's wrong, they shouldn't violate their users privacy like that.