2) Can I allow all authenticated users to filter by email_contains, yet don't allow them to retrieve the e-mail ??

Yes, unfortunately (or in your case: fortunately) you can filter on fields that you don't have

READ

permission for.