Zero-day in Sign in with Apple
"Apple also did an investigation of their logs and determined there was no misuse or account compromise due to this vulnerability."Given the simplicity of the exploit, I really doubt that claim. Seems more likely they just don't have a way of detecting whether it happened.