Apple fixed a Hide My Email flaw that exposed real addresses in mail logs when messages were rejected as spam, more than a year after disclosure.