Openhab cloud - wrong password but still notifications

I recently upgraded to a new phone and installed openHAB Android App. I couldn’t remember the password of my user so I just left the preferences as they were - Email-adress of my user but a wrong password.
locally I don’t need credentials, so I do have my sitemaps locally. remotely I don’t have sitemaps BUT I do have notifications! like that one: sendNotification("my@email.com","notification")

This strikes me as a bug and a potentially severe one? I could (if I found out) insert some email-adress from someone using openhab Cloud and i would see their notifications?