I have a Sharepoint 2010 instance that's for an intranet and profiles are managed by Active Directory.
Users who hit Alert Me have their email prepopulated in the form and are not allowed to change it.