Comment by andyjohnson0

I use my own domains, with registration and dns hosting from a reputable registrar, and paid-for email hosting from a reliable company that offers good support. SPF etc records properly set-up, including on domains that don't accept emails.

For the above: recovery email addresses (different email provider) set-up, 2fa enabled, multiple yubikeys for authentication, with fallback to authenticator codes synced to multiple devices, with fallback to recovery codes stored in multiple locations. Pay yearly for services, renew domains multiple years ahead. Reminders in my calendar to check that renewals have gone through successfully.

Periodically (couples of times a year max) back-up email to local storage using imap.