If you are concerned about privacy concerns with respect to having multiple addresses all under the same domain. My thought is that most scripts for handling any automation of email address exploitation likely treat each address separately until they can link two or more identities together. If you wrote some general logic to handle parsing millions of email addresses how would it know that [email protected] is also [email protected]. Sure a human could look and probably make the relation that yes those could be the same person if mydomain.com was something like myname.com but what would that rule or logic look like? How do we discern mydomain.com from myname.com from somerandomname.org in any automated fashion so that we can then say with some degree of certainty that all the addresses under that domain are the same person. At best I would expect you to have them all just linked to that domain/organization. You could do further logic to attempt to link domains to people but thats still going to be complicated. When it comes to security its all about gauging the threat and taking sufficient action to negate that threat.

I would probably stick with Proton for the time… Gmail isn’t private, Outlook I see as being about the same as Gmail… just blue… and then Disroot from this Reddit post suggests it is not encrypted at rest.

We have been in WW3 since Russia started it’s fully scale invasion if Ukraine in 2022. The major conflicts if it just haven’t become kinetic yet. China has conducted cyber attacks in the United States, Russia has been attacking undersea fiber. China is building ships that on gave one ouroose to invaide Taiwan. In 100 years thus will be seen as the early days if the war.