Thanks for the reply, Matt! What about HTTPS traffic from WKWebView/SFSafariViewController? I would imagine that SFSafariViewController, at least, could be considered “Safari” rather than part of the app. Also, what is the reason for applying iCloud Private Relay only to insecure HTTP traffic from apps? Why not all traffic?