We're hoping that by notifying people that there's a vulnerability, people can stop using Hide My Email if it matters to them. I don't think that disclosing the exploit method will get Apple to fix it faster at this point.
The problem there is users cannot evaluate if it matters to them whilst all information needed to do so is being witheld.
Its the only reason I even pay the $1 a month icloud plan, so might as well cancel it if its gonna be eternally broken.