A year-old vulnerability in Apple's Hide My Email can expose users' real email addresses. Apple claimed to fix it in March 2026. Independent testing shows it wasn't fixed.