yep, sanitize is important so you cannot recieve emails with malcious content. But you can move sanitze from message_gateway to the extractor, so you sanitze after parsing for @, # ,etc.