Great opsec! I also have a catch all domain for usernames and use bitwarden generated complex passwords. I have a local backup and two off-site backups that themselves have redundancy so I should be fine. I hope :)