The way I see it your mail is not publicly displayed on mastodon, only used to confirm/identify. Does @handle on mastodon has the email associated to my friend Peter ? If so it's a match.

Of course it's a whole other can of worms, reminds me of Linkedin/Fb that would spam me because they had access to my friend's rolodex..