Maybe I am paranoid, but I worry about that when I die, my domain will expire, and then someone will register that domain and set up email accounts with it.
They would be able to access so many services that I would have left open after my death. I still don't know how to handle this apart from leaving a fund to someone I trust to have my domain renewed for a few more decades after my death.
One of the reasons I am in the process of moving all of my domains to Gandi is because they appear to be the only reputable domain registrar that supports U2F. I take security extremely seriously when it comes to my domains.
I use Gandi and am quite pleased with their security settings. Not only is my account secured with an absurdly long password, I have U2F enabled and I have enabled the IP restriction list so that authentication only succeeds when coming from one of them. They even fixed my only quibble. In the past, if I logged in with valid credentials but from an unlisted IP, the error message would say "you're coming from an IP that's not permitted." Now the message for all types of failures--bad password, wrong IP, incorrect TOTP code--is the same so an attacker can't confirm valid credentials.
The good news is that you will be dead, and so you won't be worrying about anything at all.