I don't like services that send you a login link to your email, because if you can't access your email (for whatever reason), you can't login. I should be able

I don't like services that send you a login link to your email, because if you can't access your email (for whatever reason), you can't login. I should be able to use a diceware passphrase instead of a login requiring I use a combination of uppercase, special symbols, etc. Passphrases are harder to crack if the database got breached (providing the passwords are hashed and not stored in plaintext). Also: TOTP is nice, but provide an option for U2F/Hardware 2FA and always provide a recovery code incase your user loses their Yubikey/Hardware token.