Aliases exit strategy

There’s no perfect solution. I think a combination of… 1. Custom domain aliases for accounts you really care about. 2. Random aliases for most other things. 3. Seperate custom domain for all signups that don’t require any other details, such as newsletters. pretty much is as good as you can get. There will always be that risk of having to change lots of the random aliases at some point but anything you care about will be safe and hopefully lots of those more important services aren’t fingerprinting you and correlating/abusing your data to the same extent as some others.