I think you can get most of the benefits of the enhanced protection but setting specific features yourself instead of the one "do everything" flag. I have 2FA

I think you can get most of the benefits of the enhanced protection but setting specific features yourself instead of the one "do everything" flag. I have 2FA required on regular logins for example, which can be a Yubikey or authenticator app token. At the same time, I have app passwords, used by my emacs-based email setup. Mu4e gives me instant search-based access to my saved email, and pretty good security elsewhere. Is that an option?