Q. Why can I see the ePRO patient's email address I am typing?

A. We made the update to allow masking fo patient email, but do not force the masking since the user entering the email knows what they are typing and may want to verify they entered it correctly. This also prevents the need to create a custom CA to verify the email. By default, the masking is enabled, so as the user types, no other parties nearby can view it - similar to how password fields are handled. 

Additionally, as you likely already thought of, you can blind the field to everyone except the site user, so anyone who opens the CRF does not see the field (masked or not).