Ops... you're right. Now that is bad, whatever way you look at it. Some simple obfuscation should at least be added (most web-interfaces to mailing lists do that).