Encryption doesn't really help when you add "random" people to your group ..

Also, I haven't followed the email thing, but emails are by design insecure, so one should hope stuff like this was not discussed over emails (regardless server..)