Whoever owns the example.com domain and hosts a webserver with user@example.com has EVERYONE’S secrets.