Three reported leaks expose the real IP address behind Apple Private Relay

Sources: coverage
Summary: Privacy Guides reports that DNS prefetching, WebAuthn Related Origin Requests and WebTransport each open connections outside the browser proxy in Safari. The same coverage states that because iOS requires WebKit, the bypasses affect every proxying iOS browser including Tor-based ones, that the research was published without reporting to Apple first, and that device-wide VPNs are unaffected. This entry rests on that single secondary account. It names no researcher or research group, and the underlying report was not read for this entry, so the claim cannot be traced past one intermediary.
Why it matters: Private Relay alone does not hide a client address from a site that triggers any of the three paths.