Reply-All storm flares as email announcing privacy policy puts 500 addresses in the 'To' field, not 'BCC'

Newsletter-as-a-service outfit Substack does the usual apologising

Some advice from The Register: when announcing a new privacy policy don't do so with emails that reveal 500 addresses in the To" field of the message....