Excellent advice.

Re: Shortened URLs - these are quite insidious on both desktop and especially mobile. And hover for any links on mobile remains problematic.

I also hate giving out my mobile number, but it is mandatory on many sites for 2FA purposes. Even some sites only offer phone as the only two-factor.

Thanks for suggesting have i been pwned? I wasn't aware it also checks phone numbers too.