Separate the categories#
A free-provider address can belong to a long-term customer. A role address can be the intended destination for invoices. A disposable address can represent a short-lived inbox. Treating these as the same category throws away useful context.
Match the rule to the workflow#
A support form and an account-recovery flow may need different policies. Consider a confirmation step for sensitive actions. Do not silently block a business’s shared support address merely because its local part is “support”.
Understand coverage#
The local MailMaid ruleset recognizes a small set of known domains and common role names. An unflagged domain is not proven safe. Live providers can offer broader signals; document the provider and observation date rather than presenting the coverage as universal.