I mean, the result is quite concerning, but… this all starts with the user adding in a wrong email adress. So its not exploitable by someone to reveal your trip details. Its just that you may reveal them accidentally to a random person. Not great but definitely not something like phishing.