Hi Luke,
thanks for the feedback.

Can you explain to me a bit more, how that "taping" of emails
is raising the risk? I mean, if you at all can tap the emails of the 
roundup-server, you'd probably would just tap all of them. And often 
you might already have an idea about the corresponding email domain of 
some users.