Email discovery using `UserAutocomplete`
By repeatedly querying the user autocomplete view I can discover email addresses for other users. Roughly... starting with an empty known prefix P appending all valid email characters in turn and seeing which result contains the target user, then appending that to P and repeating.
Likely the only solution here is to not allow user search by email for team joining. I don't think this is really a problem.