It's less a protection schema and more a canary schema. I use plus-addressing for basically every online account that I create that does not need to be professional in nature. The benefit is that if I start receiving emails from Foo.com sent to [email protected], I know that my bar.com account got compromised and I can do something about it to limit my exposure.