Just checked my account. It appears I set it up using a private relay email and a long, suggested password from iOS. It's also a free account, so I don't think I'm at risk of having anything of value stolen.