moodle's delete_user function sets the email address to '' (used to be email || '.disabled') but in auth/db when users are undeleted it doesn't get reset. Not a huge problem as it'll get reset on next login (assuming the field is set to update on login as well as creation) but there could be try to email stuff to them in between account undeletion & email resetting on n ext login.