But Apple did not yet walk back that they wanted a single dedicated domain for private emails, privacy.icloud.com, such that it'd be easy for any host to block them.

I'm honestly getting tired of us requiring big corps to do everything for us. Use the private domain. Dont have the account if they block it. End users and consumers need to bite the bullet.