And if you don't get in are you afraid that people are going to ridicule you for the rest of your life because your name was in the to list with 500 people?
I appreciate that TC made a mistake, and you would think they might have gone a bit further in preventing this sort of mistake, but I think we have all suffered far worse invasions of privacy than this (half the people on the list probably tweeted that they'd entered anyway).
For any 'commercial' site or correspondence, I create a unique alias. Well 'create' is too formal, I simply have a catch-all address so I can create 'aliases' on the spur of the moment. I rely on gmail's spam filter to filter out the rubbish and if a particular alias becomes 'compromised', I can create a custom rule that deletes email received at that particular alias.
The only drawback is the domain is not great for dictating over the phone or in person.