Agreed, there are also ways to employ aliases which won't prevent spam, but this still doesn't explain the relation to the subaddressing regex or why other ways

Agreed, there are also ways to employ aliases which won't prevent spam, but this still doesn't explain the relation to the subaddressing regex or why other ways or employing aliases (e.g. masking) are never enough.