[marssaxman]

> true catch-all adresses (i.e. any local part works) are easily detected

This may be true in theory, but in practice, on my domain at least, it has never happened.