[philipwhiuk]

> The vulnerability affects all users of Mail app, even if they don't use Hide My Email!

If they don't use "Hide My Email" trivially replying discloses their email?

[layer8]

It will disclose your Apple account address even when you received the email on a different account in the Mail app.