I have a very common name, and monkey's paw wish managed to get the unnumbered version for my gmail address.
It has been a significant amount of work just dealing with all the derppelgängers out there who use an address they don't own for important things. Medical records. Divorce papers. Mortgages. The short of it is that it doesn't even require maliciousness on someone else's part to be affected by impersonation, accidental or otherwise. So yeah, keep what you've got, because there's no guarantee the next person to get it will not somehow affect you.
I registered a domain with my name, many moons ago.
Sometime later, a lawyer in Australia registered the .au version, but it was <MY NAME>.com.au, not <MY NAME>.au. <MY NAME>.com (no .au) was (and still is) my domain, and I get email, there.
I started getting really confidential stuff sent to my email, from the Australian courts. Stuff that could easily get people fired and sued.
I reported it for ages to both the courts and the lawyers. Eventually (after about 2 years), it stopped. I haven't gotten one of those for a long time.
It has been a significant amount of work just dealing with all the derppelgängers out there who use an address they don't own for important things. Medical records. Divorce papers. Mortgages. The short of it is that it doesn't even require maliciousness on someone else's part to be affected by impersonation, accidental or otherwise. So yeah, keep what you've got, because there's no guarantee the next person to get it will not somehow affect you.