You're right, thanks for finding this bug.
I could swear the function I am using for that was listed in the Wordpress Codex but I just looked and it's gone. Will fix in the next version.
If you wish to fix it now, replace in functions/bfa_postinfo.php
PHP Code:
// Author email address obfuscated
if (strpos($postinfo_string,'%author-email%')!==FALSE) {
ob_start(); the_author_email_antispam(); $author_email = ob_get_contents(); ob_end_clean();
$postinfo = str_replace("%author-email%", $author_email, $postinfo);
}
with
PHP Code:
// Author email address obfuscated
if (strpos($postinfo_string,'%author-email%')!==FALSE) {
$postinfo = str_replace("%author-email%", antispambot(get_the_author_email()), $postinfo);
}