Emmanuele Bassi commented on a discussion:
That issue seems to confirm that people can receive email from moved issues; they cannot access other issues unless they have a GitLab account, which is perfectly normal.
The whole point of the secure form is to let people without a GitLab account to keep track of security issues; if they have a GitLab account they can also file a bug and mark it as confidential.