[chrishajer]

This is your problem then:

Our username for login is the user’s email address.

If you are using email addresses as logins, those are visible. This has nothing to do with being logged in. I would not recommend using an email address as a login. Even if you’re going to use something like the display name.