Comment by fy20

The majority of the top 1000 YouTube accounts will actually have an email address publicly available, as they are a business and they want people to be able to reach out to them for sponsorships or brand collaborations.

For example, MrBeast has this in the video description:

> For any questions or inquiries regarding this video, please reach out to chucky@mrbeastbusiness.com

The vulnerability here is that you can find the exact email address tied to their YouTube account, which you can't really do anything with if they have strong passwords and use 2FA.