Curious what people are doing avoid such situations? apart from 2FA, two different email accounts for banking and other services?