I got hit by this exact one(free iphone X) recently, and couldn't find anything in my email.
Surely, that kind of email would just look like spam, so isn't the correct solution for google to just not auto-add calendar events if their source email is spam?