An exposed wallet address can still carry risk, even though funds can't be stolen from only having the wallet address. The real risk here is that you could lose your privacy as transactions on a public blockchain is very open to the general public and anybody who has your wallet address can get to know your balance and entire transaction history details, thereby painting a target behind your back if the wallet address holds a large balance.
What you mentioned are normal in transaction and you can't avoid, you can't stop chain surveillance from looking at the network activities but you should never let a transaction is linked to a kyc platform whether it's an exchange or any platform that has your details. For example, you did everything on chain to make sure you have the best privacy only for you to send your Bitcoin to a centralized exchange, your privacy is as good as dead because there was never privacy since you started.
An exposed email adress gives scammers the go ahead to send phishin links to that email, trying to access and obtain personal information of the owner of such an email. If a scammer gets this info, they could be able to link the wallet address of a user and their real world identity, making them a target both physically and online.
An email doesn't reveal your identity but that doesn't mean you should be careless. There billions of data breach on the internet where people but and sell information. If an email is link to you and you have used that email on websites, there is every tendency that the email can be among one of the data breach and if they check and it match your information, you are as exposed as someone without any cloth.