Surprised I have not posted prior about this. Gmail allows one to use email@example.com and have it delivered to firstname.lastname@example.org. Use it to sign up for web sites or things and filter later. Should this address be compromised, you can create a filter to delete anything sent through just that address.
Keep in mind…
- Though I would expect pretty good spammers or hackers to remove the +anything.
- Some web sites use algorithms that consider these addresses not real.
So your results may vary.