[1]: https://andrew-quinn.me/digital-resiliency-2025/#postscript-...
[1]: https://andrew-quinn.me/digital-resiliency-2025/#postscript-...
Like you, I also considered the implications of mixing TOTP into KeePass, but eventually landed on going all-in on the one database. It does mean raising the bar for keeping it secure, but it was already very high to begin with.
One thing I have considered is combining this all-in-one approach with an additional keyfile, which I could then share OOB to devices, effectively adding a second factor. I like the idea of using Yubikey or similar, but the fear of locking myself out is too great.
Overall glacier is only really suited for backups, and I don't need that much durability for a single backup. And even if durability is a big deal, I can get there cheaper. Especially using a realistic expected life cycle and not the warranty period.