You're still correct though, your solution is more secure (and also what I use). It's always possible the form you submit automatically strips the +whatever from your email silently. I believe facebook does this (at least when checking to see if the email you're using has already been registered).
With aliases, I can drop the alias and you can not easily guess my real email address.
Just depends on what you want, or what you use it for.