Is this worth the trouble? I'm seriously asking. Seems like a ripe arena for a cat&mouse game similar to adblockers. The script kiddies writing email scraping tools surely have regex searching for "[at|@] * dotcom" type of concepts.

Maybe I'm too cynical, but I pretty much assume that any email address is "compromised" (as in no longer spam free not pwnd) as soon as it is created. It may not be that bad, but I honestly believe the first time the email address is used as an ID then it is.