Hi,
The unsubscribe links in emails, the one I got pointing to https://url1908.mail.bevel.health/wf/unsubscribe (minus params), currently have TLS certificates for the wildcard SAN *.sendgrid.net, causing Safari on iOS and macOS to correctly report that the certificates aren't valid for the domain. This should probably be fixed so unsubscribe links in emails work. Possibly as a HTTP redirect instead of the CNAME that the DNS RR currently points to.
Thanks, and hopefully I'll be able to unsubscribe from the emails soon.