[K0balt]

I would enable cryptographic 2FA on all of my accounts where it is possible and run the 2FA on a discrete device (token dongle or an old phone with wifi and Bluetooth off, no sim)