They could end in @privaterelay.appleid.com which is... easy to block.