Comment by 05

I just use a unique address for each service. Any email that gets leaked or is getting unsubscribe resistant spam is added to /etc/postfix/denied_recipients :)