Coil’s privacy policy update exposes customer emails by CC-ing to 600+ addresses

Recently Coil sent an email to customers related to their privacy policy update, and apparently the email is sent by CC-in to 600+ addresses. There is also a follow up email from them aplogizing that “ due to a human error related to how we interface with our mailing list provider, a number of users' email addresses were populated alongside yours”.