All fair points Howard. Your approach is very sensible. Other elements ?

First thing you can do is check to see if you have protection in the form of personal insurance. Many home policies can include identity theft now so if you do a LOT on the interweb check and adjust yours accordingly. Many CREDIT but not all debit cards have cover, again check. If you now suffer a breach then at least you are not bankrupt and can eat and pay your bills tomorrow. Again it should be proportionate to your risk/investment in Interweb activity.

It can be easy to obsess around this stuff. Your comments about using a password protection application is wise. If OCD kicks in then the biggest worry is an inside job at that company releasing the lot. My observation would be to change the master password regularly.

If the files do contain your/family/business then store it on a USB stick and lock/hide this well, with one other person knowing where it is in case of an outage.

The footprint we leave on passing is very complex now. It can take family some time to unwind our on-line lives which makes it all the more painful. This is something not often discussed but perhaps needs to be. Simple consideration can be found here. https://www.hacker9.com/pass-your-online-accounts-after-death.html

This is a huge subject overall. I don't really know where to start and end.

Everyone loves a Morgan. Even me, unless it's broken again.