I've seen at least one site simply strip the +tag and spam my real email directly. Since Gmail is so popular, I'm sure the marketing piranhas had the stripping

I've seen at least one site simply strip the +tag and spam my real email directly. Since Gmail is so popular, I'm sure the marketing piranhas had the stripping code written and deployed within half an hour of that feature being announced.