I was under the impression that the Apple email that you get is not a real email address with an inbox? Is it? How can you verify a user the real owner of the e

I was under the impression that the Apple email that you get is not a real email address with an inbox? Is it? How can you verify a user the real owner of the email? If they are locked out of the oauth account, presumably they can't check their inbox. edit: Oh, do you mean you ask for an email address after they already flow through the oauth process - because that's the worst of all :)