Back in the day™ I wrote a C# dll to add the functionality to my Exchange server (was not an option back then; don't know if it's possible out of the box now). There are many solutions once you know what to look for (e.g. the phrase 'Catch-All')
How much spam do you get from the Catch-All?
Why would you? It's standard practice to set up a catch-all for your domain and you can just configure postfix to do that.
I mean, I agree with you in principle, but I can imagine some backwater judge deciding that Alice Techie was violating the privacy of Bob D. Luddite by accepting emails addressed to bob.d.luddite@alicetechie.com.
It is when it is literally common practice. Similar to if someone were to ask if they'd get in legal trouble for breathing. Why would you?