Earlier quoted context omitted.
I do aliases as well. Never enough. A battle-tested spammer would run s/+[^@]*// on the address before sending.
I have my own domain and just do @mydomain.com and redirect everything to the same inbox sorted in folders. Works pretty well, if any of those addresses gets into some spam list I just block it (hasn't happened yet, though)
Don't get me wrong, I use catch-all too (don't tell spammers).