The mail system employs standard DKIM, DMARC, and SPF policies to ensure all sending domains are legitimate. Apple does not read or process any of the conte...
https://www.apple.com/jp/privacy/docs/Sign_in_with_Apple_White_Paper_Nov_2019.pdf