Interesting - Apple is requiring that you register sending domains as an app developer. So even if your email address database leaks (or you try to sell your user data), only messages that are from your domains and pass SPF/DKIM would be able to send to those addresses. Really smart. I wish Google Oauth would support something like this!

https://developer.apple.com/documentation/signinwithapplejs/...