People can only access your Google account —be that console or anything else— if they have your credentials. The plugin never asks you for your Google credentials, so you can be sure that the email was not added by the plugin.
I believe Sucuri Analysts use your personal Google WebMaster Tools to request a review from Google to remove the blacklist status of your website. This process requires the validation of your website ownership which you gave Sucuri access to after providing your SFTP credentials. Unfortunately, I don’t remember exactly which system nor email address is used to run this ownership validation.
I suggest you to send your inquires to Sucuri Support at [email protected]
Or go to the official website [1] and start a chat with one of the agents.
[1] https://sucuri.net/
