The email validation script is out of date. It checks only for top level domains having two or three characters. It should be changed from (2,3) to (2,6) to allow for domains such as museum.
Agreed. An update that validates against a 4- (or greater) segment domain is badly needed. I run across these all the time with public school districts that use long domains (e.g. someone@somecity.k12.somestate.edu).