BCC is kind of a dirty trick - only the sender knows that you got the email. And there's nothing more embarrassing for the sender than to have you "Reply All". You just made him/her look sleazy for trying to hide something from everyone else (if you're the boss then it's ok, of course).