2FA isn't an option for my income tax portal but would be a safer option.
Aliases are used so I never share my actual email address. If any service I sign up with starts spamming, I know that email has been compromised (probably in a breach) or the service spams their users.
Security is very easy for me. Password managers are the norm among the privacy/security community.