This is 2018; time to stop coming up with half excuses and fix your security bugs instead of protecting yourself by removing a potential character from being us

This is 2018; time to stop coming up with half excuses and fix your security bugs instead of protecting yourself by removing a potential character from being used. I'm sure we all have different reasons why we use a + for me it's email+list@domain which lets me sort out client emails into folder for me to easily manage. Not allowing . would be a similar cry from users; if it's a valid email address shouldn't you accept it? Otherwise you are letting authorize.net pick your customers