I don’t use Simplelogin so I don’t know how their service works. The domains used for aliases don’t need to originate email so there’s no need for an SPF record. The A record for the hostname used for the MX record(s) could technically point at multiple IPs that could be changed often.
I own a significant number of domains and manage my own servers. There’s quite literally no way for anyone to prevent me from using an email alias.
My point was that trying to block email aliases is a fool’s errand. It’s a slight hindrance to only the least technical users. The entire 7c/fakefilter project is an exercise in futility.
Admittedly the title is pretty sensationalist. The repo activity seems to indicate that the project has some users. It’s impossible to know how many sites or which sites block emails contained in this list and what the impact might be. Even though I think the 7c/fakefilter project is inane, I would hesitate to say there would be no consequences at all.
It’s best to defend legitimate email providers whenever possible. If we don’t, those with an axe to grind get to define the provider’s reputation.