While we're on this topic, can you add a note to the profile page that says that email isn't publicly visible? This seems to be a common source of confusion.
I'd lean towards a check box with 'make e-mail address visible (to registered users)'. That way you get the implicit message that it's invisible by default and can share it if you like.
