An alternative option...
I was trying to figure out if this would affect me or not, as all my accounts end up in my one main Gmail account and I set it up a decade ago. It turns out I'm safe. What I have is my own domain with a web host, which offers various services including a wildcard email forwarder. So any email address at my domain gets sent on to my Gmail in seconds, even if I've just made it up.
Every dubious sign-up gets it's own email so I can tell who passed my email on to spammers. The only downside is that replying is sent from my actual email instead, unless I specifically set up the alias in Gmail.