it's really hard not to have at least one single point of failure. there's a case to be made that a single cloud account actually reduces the ways things can go wrong to just one point of failure, instead of a handful.

e.g. email on a custom domain. your domain registrar is now a spof AND your email provider for your domain is a spof. and that's just email.

There's obviously a middle ground and ways to have a strictly better personal data posture than before, but it's a multi faceted problem balancing usability, security, and resilience