Comment by fatnoah

> And a related PSA: never use "login with Google" or the like. You're exposing yourself to a severe cascade risk for the sake of saving a a little time. > And your email should be on your own domain.

Underrated comments, right here. I use login with Google for nonessential things, and own my email domains.

The only things I'd add are that you should own both your email domain and the domain for your recovery email, AND that you should be backup files and photos to another service/location.