On the same note, they can just construct <random chars>.user@mailhero.io and email sent there will be forwarded to you as if that's the custom email address yo

On the same note, they can just construct <random chars>.user@mailhero.io and email sent there will be forwarded to you as if that's the custom email address you sent out.