When sending an email to user@example.com and adding the JSD email handler in bcc (e.g. issues@example.com) the ticket is created correctly but the user is added as a request participant. This kind off exposes the bcc.

I would not add request participants when the jsd-email-handler is in bcc.