> So unless your site-specific emails are completely new inbox aliases, then I don't think this is as effective as people think it is anymore.

Even if it's a "new" alias, I often see people[1] using simple schemes to derive the address, eg. facebook@mydomain.example. With cheap LLMs it's not hard to automatically guess what the underlying pattern is.

edit:

[1] ie. in this very thread