but I would be fucking pissed if I started getting other people’s messages and notifications while having mine go to someone else.

Was that ever the case though?

I was under the impression that the spoofing the machine IDs part was only for “convincing” Apple servers that the request was from a valid Apple device, not that it would combine different people’s Apple ID’s messages in any capacity.