One of the main reasons people pay for iCloud+ is Apple's promise that Private Relay hides their real IP address while they browse the web. It does show that one of Apple's privacy protections stops working in exactly the place many users would least expect. How a login request bypasses Private RelayPrivate Relay protects ordinary Safari browsing by routing traffic through two independent relay servers. Private Relay isn't broken, it has boundariesMuch of the confusion comes from what people assume Private Relay does versus what Apple actually designed it to do. Private Relay still protects ordinary Safari browsing exactly as Apple designed it to.