Users can subscribe to areas that are not accessible to them and receive E-mail with sensitive information in it. I think this is a byproduct of the way P4Spam (and every other review daemon) constructs one E-mail then sends it out to everyone that is reviewing that path.
It would be cool if P4Spam could be the trend-setter and process a new/different E-mail for each user that will not show them information that they normally would not have access to.