Unhiding iCloud Private Relay with a selective DNS sinkhole (m-keller.com)

Imagine if you tried to submit your credit card number to a legitimate HTTPS page, but a MITM forced the connection to fail, and then your browser retried the submission over insecure HTTP. That feels like the equivalent of this problem.