Except that a trivial s/\+.+@gmail\.com// processing rule will defeat that elaborate security scheme. You really need revokable addresses that don't reveal the unrevokable address.