Does plus addresses help circumvent that? I think most email providers supports plus addressing (also known as sub-addressing). You can add plus sign and any string before the at sign. For example: [email protected]. The string between plus and at signs can be anything, and all these addresses points to your normal inbox with the added benefit that you can filter them into different folders.
PS. Lemmy version 0.18.2 was released today. It fixes the vulnerability and has some other improvements as well.