If you’re willing to pay for premium, Proton supports custom domains and catch-all addresses, so you can cut out all the extra mail relay stuff. Just give out vendor@mydomain.com, and it all comes back to the same mailbox. If it gets compromised, just set up a rule to trash anything to that address.

So now this satellite can be an “anomaly” for another satellite, and the circle of life continues…

Shhhh