But the most troubling part of this story is Apple’s terrible handling of the issue. Murphy reported the bug in June 2024, and Apple responded a month later, saying they had launched an internal investigation. Then, in March of this year, they announced they’d fixed the issue—except they hadn’t. Murphy checked, and the flaw was still there. So in May, Apple changed its tune and flat-out told him to shut up, but the most annoying thing about this whole situation is the crappy handling of it: “We would appreciate it if you wouldn’t disclose this information until our investigation is complete.” In short, just shut up while we do nothing to fix it ^^.

(via https://korben.info/apple-hide-my-email-faille-adresse-reelle.html)