It worked because email_address IS NULL tries to find an email_address field and -- introduces a SQL comment.
email_address IS NULL
email_address
--
Without the comment, the '; signs at the end of the statement would cause a server error.
';