Here's his Mastodon thread with some hilarious updates: https://infosec.exchange/@SecureOwl/116404712213309413

So whats the best strategy for this?

long time ago, I was doing the same, but I was using randomString@example.com and example.com cannot be bought, since its dedicated to examples.

Obviously one has to have a dedicated field too, something like isDeleted or deletedAt...