Your example id is a md5sum of the “sjobs@apple.com” email address? That still allows someone who knows your email address to maliciously unsubsubscribe you, right?

I use a short random 8 character string in my home grown list manager. https://github.com/kaihendry/sg-hackandtell/blob/master/list/list-funcs.php#L3