Interesting - Apple is requiring that you register sending domains as an app developer. So even if your email address database leaks (or you try to sell your user data), only messages that are from your domains and pass SPF/DKIM would be able to send to those addresses. Really smart. I wish Google Oauth would support something like this!
https://developer.apple.com/documentation/signinwithapplejs/...
> Sign in with Apple won’t track or profile you as you use your favorite apps and websites, and Apple retains only the information that’s needed to make sure you can sign in and manage your account.
From https://support.apple.com/en-us/HT210318