Password reset and notifications.

We use it as an (imperfect) speed bump for spammers. Also for password resets. That’s about it.

I assume it can be seen by admins?

I trust my admins, but I still used a forwarding service because there’s always a risk of an attack exposing data. Unless there’s some other security there I don’t know about