ContactEmailAddress is considered as part of sensitive information, which is fine, you would want to restrict others on getting that information with a simple GetProfile call.
That being said, why wouldn't it be possible to retrieve it in your own login call?
It would cut extra verification with a server call to know if the email was verified or not.