Same story with Gmail here, and unfortunately over the years it has simply become my primary. I'm still undecided on how I want to handle my own domain+email.

Someone opened a Venmo account using my gmail and immediately started moving thousands of dollars in small transactions, and my only options were to a) take ownership of the thousands of dollars of small transactions that were now associated with my unverified email or b) get my email banned???? Eventually I got an email saying the Venmo was disabled due to suspicious activity, hope that doesn't bite me in the ass in the future.

What if I wanted to sign up for Venmo in the future? Why do I need to create another email address to use their product in the future when they didn't even verify it in the first place? How are they allowed to run their billon dollar business like this?