I have an email account without MFA enabled with encrypted files containing stuff like recovery codes, password manager secrets and other essential stuff like t

I have an email account without MFA enabled with encrypted files containing stuff like recovery codes, password manager secrets and other essential stuff like that. I never use this account for anything else and never send emails from it (other than for itself to store new items), and the account name itself is kind of a passkey. Years later and I still haven't received spam on it. As long as <cloud free email provider> doesn't fuck me, looks like a sensible last resort to the failure of all other backups. Of course, not living in a house made of wood and cardboard also helps.