well for one you also need to blacklist the aliases, ex. guerillaclick+sdf@gmail.com, and i suspect sysadmins start showing more hesitation when you need to start pattern matching (risk of false positives and additional overhead)