Yes, but it’s the same age old problem of hackers extracting and mis-using email addresses in phishing schemes which has been an issue for many many years. They don’t really care if they are infringing on your privacy.
Google can try to block these occurrences but hackers are organized and it is very difficult to shut down their offences. Others just pop-up somewhere else.
The benefit AppSheet has going for it, over email in general, is that the platform is much more limited in term of online activity when compared to emails and hopefully easier to identify and shut down these suspicious apps when they pop-up.