Earlier quoted context omitted.
I don't think they've thought about how precise 100% compliance is literally impossible for those of us with catch-all email domains, unless we have a record of every email address at that domain we've ever given out or through which we've received unsolicited email. (Yeah, I realize that in practice they will probably accept partial compliance in that scenario, and that it won't affect me as a US citizen. But it cou…
Couldn't you just write something like "All emails @mydomain.com" if asked you could explain how it works and they can't say that you ever lied.
I guess they may have some procedure to handle the case where technical limitations of the form prevent an accurate answer, but even if yes that's still a huge obstacle many applicants won't overcome.
(Yes, applicants with the technical savvy to catch-all domains are more likely to be able and willing to overcome that type of barrier. Other categories of people will have a harder time, like who are sure they've forgotten some email addresses but don't remember enough details to reconstruct that info. They'll have to say exactly that, if they can even find a place to provide that answer, and possibly get refused as a result.)