Yes, but how does this particular privacy leak benefit Google? Google wants to have all your information themselves. Why would they want to give that info to your boss?

This sounds like somebody being really clever and whipping up a fancy feature, but forgetting to finish it with proper meeting requests and a freaking confirmation box and whatnot.

The idea itself is good - check for email addresses in meeting information and tying those to a Google account as invites. The problem is that the user isn't asked.