This. Authy and a throwaway phone added in that sits in a safe place.

I stopped using Authy when they were bought by Twilio and stopped supporting their desktop client (thus eliminating my alternate device backups).

I can highly recommend Ente Auth though.