A Hide My Email bug exposed real addresses through bounced spam messages for over a year before Apple patched it, just days after public exposure.
Apple is merging Sign in with Apple and iCloud+ Hide My Email under a single private.icloud.com domain, making privacy addresses easier to recognize and remember.