If I understand correctly, the email confirmations get sent out to all plugin committers correct? It's not just sent to the WordPress.org user who is the owner of the plugin, right? I can see that being a desirable security setting as well, if only the owner can approve a release, rather than any one or multiple committers.