2 points
There are github repositories where people curate a list of domains providing temporary emails or email aliases and admins can just point to the maintained list to block.
In the ~20 I’ve created so far I’ve had 2 services that wouldn’t accept simple login. For those I’ve used proton mail’s built in email alias service where you get 15 aliases with their proper domain.