Yeah, I’m sure many spammers “fixed” this a long time ago. The logical next step would be to bounce all emails which go to the plain version of an email address, but I guess also anything after + which one hasn’t “whitelisted”.