Comment author emails exposed?

Email addresses of each of the commenters are exposed to the public. I’m using it with the Leira Letter Avatar plugin so it’s possible that the error is on their end, but I didn’t notice anything in their code.

When I view source, I can see every review email address as alt text. I commented out line 1451 of class.yith-woocommerce-advanced-reviews.php as a temporary solution but that breaks the Leira plugin. Is there a better way to do this, or an update?