There is an additional problem with catch-all emails on a custom domain, the domain itself is a uniquely identifiable substring (easy for data-gobblers and adve

There is an additional problem with catch-all emails on a custom domain, the domain itself is a uniquely identifiable substring (easy for data-gobblers and advertisers to trade or sell). Why not use a relay service like [https://relay.firefox.com https://relay.firefox.com] or [https://owlmail.io https://owlmail.io]? Since most senders aren't using PGP/E2EE your effective security risk is equivalent. Plus you can still discover address misuse/sale/leakage, disable addresses at will, and your privacy increases.