I just tested it with a bunch of periods. I got rejected with just two periods adjacent, and with quite a few more periods adjacent. So only bits. Looks like it can be used for filtering too.
I never understood why that was useful. If you're a spammer that harvests email address or if you're an unscrupulous service that sells your user email address to spammers, wouldn't you simply remove the '+' suffix from any gmail address before commencing your spamming?