Even if they did use '+', that should still definitely be allowed. I immediately get turned off when a service actively disallows a '+' because then I start to wonder why they don't want me to be able to filter their messages in my inbox.

It's the only sane and easy (but obviously not bullet-proof) way of catching spammers out.