my experience having a unique email per domain is basically the hacked companies are the ones where the email is bled to spammers - though going through google'

my experience having a unique email per domain is basically the hacked companies are the ones where the email is bled to spammers - though going through google's services i think a ton of spam is auto filtered (though i did go through a chunk of emails at one point and flag as spam+ auto purge). its probably more likely they collect the info on you and associate you with the different domains with those emails (and likely without those emails, too) email is too easy for the user to filter out spam; why bother with that vs websites that require javascript, proactively treat users like they are bots, and also serve ice cold ads? [ex cloudflare and amazon where you have to verify you are a bot _before_ trying to login; remember when websites allowed like 3 attempts before offering the bot detections / backoff protections? - now we cannot even try to login perfectly once without getting "am you a bot?" prompts - even with TOTP] but after all is said and done - i still really do enjoy a single email per website - it is a great way to filter items (and takes 1 attack vector out of the public email part; they dont ever get my username unless they hack the server)