Thanks for a nice comprehensive article on 2FA. I am a fan and usually use a password manager with generated passwords plus a TOTP but as you say it is not a panacea. Definitely you need a backup for the 2FA, an old phone being easiest. I’m now trying using a Yubikey but usability is not that great. The new biometric version would have some advantages but does not have such wide support. Have your views changed since you wrote this article?