I.e. on early 1.8.x versions I was able to extract all user emails without even logging in and using only core views ;)