I'm not really sure but maybe it will be useful for the users to have your service integrated with HIBP[1] to check if their mail aliases are in any security breach? IMHO, biggest threat is giving up mail alias but keeping some registrations on it so if some abandoned mail alias is in the breach it seems good to inform customer about it.
[1] https://haveibeenpwned.com/