I have my own domain with [anything]@mydomain.tld gets forward to my real address, so I generally use a unique email address for any service, retailer, mailing list etc. A password manager is a real benefit for this.

I've caught places that get hacked or sold their list and can filter them readily.

I think that this approach also helps reduce the attack surface from a hack as there is little to no reuse of credentials, but at N=1 I can't verify that. Maybe there's an oversight in my approach.