What I often see is js that fetches the email from the server separately and inserts it.