A catch all is great. You can create emails on the fly. ntflx@ disney@ gh@ cf@ it's great for signing up for services or signing up for services for multiple domains at services like CloudFlare, etc.
I don't get any spam, that probably depends on the domain, if it was owned previously, occasionally you might get an email intended for someone else. Almost all domains that I have mail for gets a catch all.
You could have also used "plus sign" addressing if your e-mail provider supports it.
For example, gmail supports it so if your email is bob@gmail.com you can register for services using bob+something@gmail.com and it will end up on bob's mailbox.
While this is useful, please note that this is not as private as a catch-all alternative as one can always infer the actual e-mail address by just removing the plus sign and everything after it while using a catch-all you can completely obfuscate the actual username.
Do you have a popular domain? I get zero crap on catchalls. I don’t think spammers bother sending emails to random addresses at a random domain, they rather use a proven list of actual emails given the same resource.
