Given how well known user+site@gmail.com is wouldn't many sites simply strip the +... part before selling the email data?
Finally, since the format uses a dash rather than +, I have never once had a disposable yahoo address rejected.
Not sure if that made any sense, but here's a link to the docs:
On the e-mail provider's side, one way to work around such broken systems would be to let users generate random, opaque aliases which do not contain their primary e-mail username but route to the same account, with a predetermined label applied on receipt. These would look just like ordinary addresses and there would be no way for services to strip out the identifying elements.