If someone's been committing with a bogus email address and they're still working on the project, shouldn't they clean up their own commits?

Yeah, using this tool for example?

[dead]

Usually its me who has been committing with a bogus email address, because I don't like having my real user/email set in my $HOME/.gitconfig

Hi there, webstrand@Webstrands-MacBook-Pro.local - we meet again!