I have a catchall rule on my personal domain, so I can trivially make up a new <[email protected]> for everyone who wants an email address. If I get more than a small amount of mail from some sender, I just set up a forwarding rule which deposits everything received on that address into an IMAP folder called "recipientname". If the address becomes compromised - which has happened rather less often than I expected it might, when I began using this scheme - I just change the rule and route the mail to /dev/null instead.