At the cost of blocking legitimate users who don’t want to be spammed, don’t want to be correlated after a data breach, etc.

I have been willing to do KYC for services (usually financial) without giving out my main email. Services that put up too many barriers to this don’t get my business. I concede that there aren’t that many users like me, compared to the general public, but I’m a legitimate user.