On the later subject: I have a catch-all on a subdomain, so I do that on a regular basis with zero time effort (amortized). Just enter "${websitename}@antispam.

On the later subject: I have a catch-all on a subdomain, so I do that on a regular basis with zero time effort (amortized). Just enter "${websitename}@antispam.[...].com" during registration. I'm actually surprised that only a handful of these addresses receive spam; but misconduct as described here never happened to me. (Website and service operators claiming they were not pwned, however, is pretty usual).