Your primary email and your domain registrar are two places where you absolutely want 2FA. Double true if your primary email is at a domain you own (which seems like a great idea but makes you much more vulnerable).