Can I add a request for this option too? I use the same system - if I sign up for a product I use the email address productname@mydomain and that way if they sell my data without my consent I can tell exactly who did it.
I appreciate that it causes security issues but it would also allow companies who have had staff leave but still get emails, or just catch emails where clients have misspelled names.