I very much agree with Kay's answer. As noted in the WikiTree Privacy Policy:
We have implemented commercially reasonable technical and organizational measures designed to secure your Personal Information from accidental loss and from unauthorized access, disclosure, use, or alteration. However, we cannot guarantee that unauthorized third parties will never be able to defeat our measures or use your Personal Information for improper purposes.
This is a standard disclaimer across the internet, and understandably so. Websites--like WikiTree--store our personal information, the private information used to authenticate us with the site, in one of various encrypted formats. This means our passwords and email addresses are never stored in plain text, but as an unrecognizable jumble of random characters and numerals.
This is not the case if you place an email address into a profile or FreeSpace page. They are stored exactly as entered, in plain text. The only thing that protects them from being visible to spambots and email harvesters is the WikiTree permissions setting. This is not a form of encryption; it's merely a matter of who has rights to see what; in webspeak, it's often an ACL, Access Control List. Any website, including WikiTree, has less control over that than it does encrypted data.
Because most people, unfortunately, use the same email address throughout the myriad of sites where they complete registrations--including financial institutions, insurance companies, even government and tax entities--our email addresses are information sought after by hackers.
WikiTree introduced in March 2021 measures that prevented profiles and profile comments from being saved if email addresses had been entered. From other comments in this thread, that restriction evidently wasn't made to extend to FreeSpace pages. But I believe it should.
I don't award "best answers" until the person who asked the Question has time to decide from multiple answers, but Kay would get my star for this one. We really should manage our email contact addresses outside of WikiTree. It shouldn't--in fact, can't--be WikiTree's responsibility to keep personal lists of email addresses secure "from accidental loss and from unauthorized access, disclosure, use, or alteration."