Supposed to make it up. Doesn’t mean they always do, and if you’re living paycheck to paycheck you can’t easily sue for lost wages

3 separate backups on 2 different media (ie 2 backups on 2 separate HDDs plus one on DVDs) with At least 1 offsite (ie a satellite office or your parents house for personal stuff)

You can use TOTP 2FA on a browser too, there’s plugins for it. It’s not some super secret algorithm, smartphone apps are just the most common way of handling it. I suppose there’s progress to be made in terms of accessibility and education for the general public in terms of options for TOTP.