My setup is nearly the same. I use two domains such as firstlast.tld and genericwords.tld.
Genericwords.tld has umbrella aliases for social, apps, subscriptions, orders, etc. I have rules setup up per umbrella alias to delete after 30 days, or always mark as read, or never mark as read.
I originally had service/site specific aliases in mind for easy deletion, but for my setup this creates a layer of friction that makes it quite cumbersome.
I considered umbrella+servicename aliases but those are not always guaranteed to be accepted.