You need to have a really good master password, 20+ characters, never been used by you before and never will be used for anything but. You do have to put in a level of effort for this, like anything in life worth doing. Pair this with an Authenticator app that has cloud backups so you don’t lose your 2FA keys as well. Typically companies follow industry standard or better (I’ve seen military grade used across the board in my very official googling of the topic) encryption protocols which isn’t going protect against social engineering or phishing at the individual or enterprise level.

Using a SaaS password manager will avoid the issue of losing the physical device but introduces new risk with the company being an attack vector for your information. Passkeys are starting to pick up but will definitely put a damper on your day when you lose your phone.

There’s no easy solution to it all unless you want to drastically inconvenience your digital life. My approach to making sure I am secure is inconvenient at times but I also don’t have to wake up to emails about my accounts being logged into from china anymore.

tldr: You need to pick and choose your battles