Never mind the intended design, I'm only interested in the details of Apple's actual implementation, especially when it comes to abuse. For Tor, it seems I invariably end up blocking most exit nodes because someone tries to use it to probe for web vulnerabilities. If Apple doesn't have a policy in place to nip that kind of activity in the bud, they'll be tainting whatever IP space their requests are coming from, too. Maybe they think only providing it to subscribers will limit the abuse, but I can see that just as easily creating an attack surface for malicious web sites (or extensions) to hijack any visitors using Privacy Relay to launch a DDoS (or similar). 233d0fbfc4547991265dd252ced7aa9037c1b043baa94d1061120afd8df03099