We basically have the full attack chain, we just have to put it together.
- Leak the obfuscated Gaia ID of the YouTube channel from the Innertube endpoint
/get_item_context_menu
- Share the Pixel recording with an extremely long name with the target to convert the Gaia ID to an email
- Remove the target from the Pixel recording (cleanup)