How on earth are they proxying through Fastly? I would expect Fastly only sends requests to their customers origins, yet Apple is proxying requests through them to arbitrary websites.

I wonder if you could abuse this to bypass ACLs on Fastly customers that block direct origin traffic.