> The vulnerability affects all users of Mail app, even if they don't use Hide My Email!
If they don't use "Hide My Email" trivially replying discloses their email?
It will disclose your Apple account address even when you received the email on a different account in the Mail app.
It will disclose your Apple account address even when you received the email on a different account in the Mail app.