This doesn't make sense to me. Domain admin account with a strong password and 2FA set to an SMS to my phone number or a trusted contact's phone number. Voilá

This doesn't make sense to me. Domain admin account with a strong password and 2FA set to an SMS to my phone number or a trusted contact's phone number. Voilá. I can use that to reset my main email account 2FA and go from there for the rest of the services.