I have the same concerns. I use 2fa in the password manager only for non essential services. All essential services are on a different 2fa system, so its easy to use 2fa on most services (more protection overall) but the critical stuff would still be protected if the vault gets leaked somehow.

They also offer 3 aliases as a base and you could add more for extra payment. They’re pretty cheap too.

You could check posteo.de for email services, I didn’t have any issues with them since I opened the account about a year ago.

Edit: addition

I’d choose KeepasXC over Bitwarden since it has a built in 2fa which is convenient to.use and made me have much more 2fa configured over less critical services. Most critical services I have 2fa for are separated in a different 2fa method Aegis. Yubikeys and such are top level of course but they require a bit more responsibility in usage.