Webform email token preprocess sends tokens as plain text.

When setting the to_mail field to a tokenized value (specifically site:mail), the preprocess hook for html mail converts that value from the config to a string. The token value is not shown when building the HTML mail and the token itself is displayed. Using a custom email address, the value is already in string format and so it is displayed properly in the resultant email.