Many providers support plus addresses like bob+servicename@example.com. Servicename can be anything and doesn’t require any setup.
All a service provider or malicious actor has to do is simply not include it when storing or publishing it to evade tracking.
Stripping it is not uncommon for services to prevent duplicate accounts.