Yes, I am saying that. But I'm not sure that your implications are correct. Like reading the blockchain, they may be able to find the public keys of every address on the network without trouble.
My knowledge about bitmessage is very close to 0, so you should be right
I thought never used address were impossible to find