    def assertNeverEmailedWrongUser(self):
        self.assertNotIn(self.never_emailed_user.email, [to for email in mail.outbox for to in email.to])
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.