Just a note to new (and old) users here on the forum
If you see something that you think is a security issue DO NOT comment on it on the forum.
Flag the post you are concerned about and/or send an email to contact@snap.berkeley.edu
If you other users don't know why to send security issue posts to the email, it's safer for some problems to be private rather than public.
A good example of this is from one of my earlier topics, Future page/action in the works? - #4 by joecooldoo, where it went from "Ooh, I've discovered a new non-functional page" to "Ooh, I've discovered Snap! uses innerHtml instead of innerText for usernames". It was fixed shortly after, but if I'd discovered that before, I would've definitely sent an email. Thanks cymplecy for raising attention to the contact address. 
what?
problem is, whenever I've tried using that email I simply get an error telling me I'm not part of some workspace group
It sounds like you're using a school email or a managed account, since I've never had any issues contacting them by email.
that is not the case. i use a non-restricted personal email.