I wrote about this issue on my blog. Basically just using email aliases on a custom domain to enable per-provider filtering, and deletion of the alias if they ignore unsubscribe requests or get hacked. https://jonpurdy.com/2020/06/using-email-aliasing-to-detect-...