Looks to me, that multiple user can use the same email as long as they have different usernames. If true, this is a big no no.

I further investigate.