They are not suppose to do that. It is disrespect to the user privacy. Hence good opportunity to change owner. Just a design flaw of the protocol that makes it possible to abuse that. Gmail is just one single provider, but yes, many more does it and Gmail is big.