[pvg]

A better, simpler-sounding plan is to enable better 2FA on your critical accounts. Doesn't this mostly fix your catastrophic scenario?

[graeme]

Oftentimes 2fa backup codes are slso stored in the password manager.

[spydum]

Or the password recovery for lost 2fa is secret questions (this is so awful,but see it often). And chances are those secret questions/answers might also be in the vault

[graeme]

Does anyone have a good solution to these issues for non techncial users? 1password etc + 2fa is great for even not super technical people.

But if it's ever breached I have no idea how you would get clear.

[pvg]

Sure but that's roughly equivalent to disabling or not having 2fa. You can still avoid the catastrophic scenario by not-doing that.