I did a wildcard acceptance for years, but it doesn’t scale as well something like Apple’s Hide My Email (or other comparable service) - with a catchall you have to then start keeping a blacklist of bad emails, and I started getting spam to generic addresses like [email protected] or [email protected] - with @icloud.com addresses you can just delete an address and forget about it once it’s burned.