Zero-day in Sign in with Apple
"<i>Apple also did an investigation of their logs and determined there was no misuse or account compromise due to this vulnerability.</i>"<p>Given the simplicity of the exploit, I really doubt that claim. Seems more likely they just don't have a way of detecting whether it happened.