I have firstname@gmail.com. I could tell you all about how easy you get off.
Interesting fact: most emails I incorrectly receive is because whoever creates the accounts/makes the orders/etc knowingly provides websites with my email instead of their own.
All in all it’s pretty crazy.