Also a good way to get vast amounts of dictionary attack spam. One of the mail domains I host was accepting mail to all addresses for some years, and this seems to have attracted even more spam: the volume of junk it gets is disproportionately huge compared to the other similar domains.

My mail server allows -- as an alternative to + so my users can work around braindead address regexes.