I have a catch-all setup at my domain that forwards to my main account. I can then setup a filter to disable an address if it starts getting spammed or is compromised.