I would have expected @Email to return a false for a case like : ' abc@def.au '

It does. However, it is not the email validators responsibility to trim the string prior to validation. That should be handled in other layers of the application or you should throw the violation back to the UI/user.