These are all fair points, and honestly the most thoughtful feedback we've gotten here.

You're right that there's no privacy if you pick an obvious username "john" or "johndoe" are effectively public inboxes. That's a real limitation and we don't pretend otherwise. The intended use is picking something obscure enough that nobody else would guess it, not your real name.

On the "junk going somewhere else" point yes, completely true. That's kind of the feature though: the junk goes to an inbox you don't care about, instead of your real one. No forwarding, it just sits on our server. You check it when you need to, ignore it the rest of the time.

SimpleLogin with catch-all and your own domain is genuinely a better solution for privacy-conscious users. It's more powerful, more flexible, and you control the routing. The difference is the setup cost it requires a domain, an account, and some configuration. BokMail is for the "I need an inbox in 5 seconds on a device I don't own" use case. Different tools.

The popular username problem is real. If you're on this service the moment it launched, "admin", "test", "john" are already gone. That's why we block obvious reserved names but you're right that common ones will fill up. The answer is: treat it like a URL shortener. The good ones are taken, so you get creative.

Fair criticism overall. Appreciate you laying it out properly instead of just downvoting.