”Hide My Email users deserve to know that it may be possible for attackers to discover their hidden email addresses,” the person who reported the issue said.

Apple’s known about it for a year but hasn’t fixed it.