I think another consideration that might not be an obvious risk is your use of two factor auth. It’s important for critical services, yet if you lose your 2FA

I think another consideration that might not be an obvious risk is your use of two factor auth. It’s important for critical services, yet if you lose your 2FA device, like a phone, you will be locked out for a while. Like many things, it will happen at a bad time.