I only use KeypassXC. I only browse sites from workstations. The database gets backed up. That backup is replicated and also off site where no icky cloud can touch it. No 2FA involved. Disks use encryption with a long passphrase and no encryption headers. Disks are in lock boxes with biohazard stickers and logos for gain of function viral experiments. There may or may not be cheap pipettes and duct tape included.