Comment 1 for bug 1674802

It turns out an individual cPanel guest domain admin can create a <email address hidden> list in her domain and configure it to handle mail to that address.

It also appears that domain admins have the ability to create forwarders for addresses like <email address hidden>, so the exposure of that address is no more of an issue for cPanel users than for others.