I'm not saying I do this but if I were as smart as I think I am I would have given a Gmail example rather than the example you've given to avoid bots just looking up my website and starting to bypass my setup... ;) ;) ;)
Also, spammers generally don't seem to be going to the effort to apply regex filters to the data they've scraped...
I self host email, and I have never gotten spam to any email "constructed" from the domain, other than random attempts to things like "[email protected]" etc.
But the email I used to interact with the Linux kernel mailing list I had to null route after a while, it got so much spam. I used a throwaway for just that purpose of course, so no big deal.
IF alias NOT ON allowList MOVE TO specialLittleFolder
By far the worst one is always going to be something generic like contact@, but my email provider is very good at filtering out those appropriately. :)