One reviewer's note about my 2FA setup made me redo everything

I had my auth app linked to like 14 different accounts and thought I was being careful. Then a security auditor I know glanced at my phone during a meetup and said 'you realize if that phone dies, you're locked out of half your life, right?' He pointed out I didn't have backup codes stored anywhere except a screenshot folder. That hit different. Spent last weekend printing out recovery codes for every single account and putting them in a fireproof safe. Also moved my main email and banking to a hardware key instead. Still working through the rest, but the peace of mind is huge. Has anyone else had to backtrack on their 2FA setup after a close call or a blunt comment?