[hxsvui]

"use VPN" is a pretty strange advice if you consider how any shady providers there are. Switching you phone to 4G-only pretty much gives the same level of trust in the radio access.

Covering the webcam is just ridiculous. If someone has access to the webcam without obeying the standard interfaces in your browser and asking for permission, then the problem is not the webcam picture. Your computer is controlled by someone else.

Also I have trouble recommencing 2FA. User, password and e-mail access is considered one factor. Adding another one increases security over that - even if it's insecure SMS. But it often completely disables fallback authentication. The advice for 2FA should be: if you need 2FA, add a minimum of tree factors to allow recovery.

All in all, nice list.