There are two powerful little Configuration Parameters that can help to control non-prod emails finding production users. They are mail.proxy and mail.proxy.exceptions in the "email" Component.
mail.proxy defines an email address to send all outbound emails to. When set, it will override an email's usual destination. You would use this to essentially route all non-prod email traffic to one email address.
mail.proxy.exceptions defines one or more email addresses (regex form) where the mail.proxy override should be ignored so these emails reach their intended destination. You would use this if mail.proxy is set and you want to allow specific emails to flow out to non-prod users, admins and testers.
Examples:
mail.proxy

mail.proxy.exceptions

Here are a few flavors of the regular expression for the mail.proxy.exceptions Value:
^r(?:johndoe|janedoe)@gmail.com$
^(johndoe@gmail.com|janedoe@gmail.com)$
Infor Documentation Library