I can already see devs implementing things such as `if email domain ends in privaterelay.appleid.com reject the email address and ask for a "real" one`, like what already exists for yopmail and others.
This is for the devs that specifically want the minimal-friction sign-in.
I'm not sure if they could sustain such a policy.