Using icloud.com domain for legit and hidden adresses is such a typical Apple strategy of holding their own users and "others" (ie. other web services, other users etc) hostage simultaneously. But at least here it is actually a good reason that works for the user.
Case in point: many websites block all VPN except iCloud Private Relay. Thank you Apple!
Seriously, Apple is "big tech," but they are the only one that appears to give a crap about privacy at all. And really, they put a lot of money and effort into it.
We need to give kudos when they are due.
Apple's Private Cloud Compute should have won some kind of Nobel Privacy Prize, which for some reason does not yet exist.
They still don't let me install uBlock origin + noscript. Whitelisting per-domain and per-site what can run Javascript does more for my privacy than anything else, and I can do that with firefox on linux and android, but on iOS I'm not allowed to install firefox.
There's obviously no real technical limitation since if you live in the EU you can sideload an alternative browser in theory (though apple has made it unrealistic in practice since they're ignoring the spirit of the law and instead doing their darndest to resist giving users even a whit of freedom).
They also don’t allow you to install Windows executables. They do allow you to run adblockers designed for Safari, like Wipr, and there are any number of noscript-alikes, like StopTheScript. I’m not saying that to be snarky, but to say that different platforms have different ways of doing things.
And Firefox is in the iOS App Store. I know what you meant to say, and that it’s not the same as Firefox on Android, but it’s wrong to say you’re not allowed to install Firefox.
Since Apple specifically disallows using other web engines on the App Store, I have bad news for you : Firefox on the App Store is just a reskinned safari and as such, a lot of features cannot be implemented because they depend on the web rendering engine.
That would be news to me if it wasn’t what I already said, that iOS Firefox isn’t the same as Android Firefox.
Well there’s UBlock for Safari, yeah it’s not UBlock Origin but it’s not that nothing is available. https://apps.apple.com/gb/app/ublock-origin-lite/id674534269...
Also Brave supports per site JavaScript blocking on iOS.
So there’s more privacy tools available than you think/assume.
ublock origin is supported by Safari
ublock origin _lite_
https://github.com/gorhill/uBlock/wiki/uBlock-Origin-works-b...
I also can't use Safari because I want my tabs and bookmarks to sync between my desktop machine (linux) and my phone (iOS), and Safari is the only major browser which can't do that.
Not to mention Safari is just an inferior browser which seems possibly designed to hold back Progressive Web Apps so that everyone has to make app-store apps and tithe a percent of all profits to apple.
PWAs hold themselves back, they don’t need any help from Safari.
Apple is luxury big tech.
In this day and age, privacy is luxury, so that's what they sell.
I don't think there are any ethical motivations for them (or any other large corporation - none of them have morals so they cannot act morally). It's just that there's a market niche, so it will be filled by someone.
It’s an additional layer of wall for their walled garden to keep the technically proficient users that are more likely to hop walls.
money from advertising basically dwarf user lifetime purchase of privacy tax you mentioned
The ad business has a lot of people chasing after the same ad spend.
Superbowl ads, TV ads, radio ads, print ads, billboard ads, public transit ads, youtube ads, podcast ads, search ads, e-mail ads, social media ads, in-app ads, in-store ads, sports team sponsorship, individual athlete sponsorship, stadium naming, product placement ads, elevator ads, cinema ads, bathroom ads.
And Coca-Cola doesn't increase their advertising budget just because someone finds a new place to slap ads on - they just re-allocate their spending.
Sure, Google and Facebook make a good chunk of money from ads. But it's a very, very competitive business.
> but they are the only one that appears to give a crap about privacy at all.
they advertise that they do. that is not the same as doing
Apple literally wanted to scan all your photos and automatically report you to law enforcement if a fuzzy hash happened to match an opaque database.
Only thing I wish they were 20 years sooner.
The person you're replying to is saying "Sites I use block all VPNs besides Apple's subscription service VPN" - I'm not sure they're not blocking it just because they fervently believe in Apple's privacy commitments and engineering :)
Only pointing this out because I love Apple's privacy story and don't want your reply to be misconstrued as sarcasm, and thus the reason why it enjoys a singular exemption is because its ineffective.
I’ve never been under the impression that privacy relay is anything like a true VPN. I mostly thought it stopped BS that happens on public WiFi and public sniffing. It’s meant to protect you only until you get to a major carriers infrastructure.
The design is supposed to be better than a true VPN, because neither Apple nor the exit node (Akamai, Cloudflare, Fastly) are supposed to know both who you are and what you’re doing. Of course, Apple pays them for this service, so they could exchange info.
It is a VPN in the sense that your traffic flows privately through a third party. This is what most people refer to when they say VPN.
It is not a VPN only in the technical approach.
It's something of a "private relay", you might say.
how is the user being held hostage? you can redirect hide my email addresses to any domain
I think the other answers are misinterpreting your question. A user is held "hostage" because unlike fastmail where the format is word.salad@yourdomain; if you ever wanted to ditch iCloud completely, you'd have to go through every single account you used it for and update the email. As someone who has shed his gmail account I can tell you it's not easy to update email address on every site you've ever used it on. The issue people are raising is that apple doesn't let you use your own domain, and generate random emails at that domain. Not my complaint, but I can see the perspective.
I mean, that is no different than any other provider.
If you want to degoogle, you still have to go to each site and change your staticuser@gmail.com individually.
Most users already do not use custom domains if that's the catch.
Marketing turds can't just block registrations from all of @icloud.com.
That doesn’t explain how the user is held “hostage” by Apple
Hostage may be a bad analogy. More like a game of chicken. Imagine you are a regular @icloud.com email user. Apple is basically saying "I dare you to block all @icloud.com email and lose all these customers"
you could say the same thing about AWS or Cloudflare hosting anybody and everybody. Spain actually started blocking a bunch of their IP blocks during football matches due to a poorly thought out legal decision.