Apple’s Hide My Email feature has a bug that’s been exposing real email addresses, researcher claims