One bug remains. I am able to set the same email address for public display as the private one used for forum business, such as resetting the password and notifications.
After some testing, I notice that password resetting is still disabled to prevent abuse. The new software can allow the password to be reset just by typing in a person's username - no email address required. If this were ever enabled, it would make the forum wide open to problems.