When using JIRA to send notification to all users or to a specific group of users, all mailadresses are displayed in the list of 'To' recipients.
a) This exposes emailadresses to other users
b) This exposes domains (i.e. clients) to other clients.

It should only add the JIRA Administrator as a 'To'-recipient and add all other users to the 'Bcc' recipient list.