[jmull]

You're giving the article more credit than it's earned.

Indeed, a developer should understand the risks and benefits associated with using an email address on domains they control vs. domains someone else controls.

Too bad the article doesn't make that point.

(Seems obvious to me that a domain you control is less risky since the mitigations are relatively straight-forward and reliable, while for a domain you don't control, you really don't have any reliable mitigations if the domain owner decides to shut you down. Not to mention that a third-party domain also has the risk of expiring or being highjacked. A third-party domain only makes sense if you want to trade risk for dollars: a cheaper or free email address for a greater risk of losing control of the email address.)