I like that question also (on are your prepared for loss and recovery if devices all stolen) and I've asked myself and others a few times in the past.

1. Most people would probably not be able to recover a lot of things, browser accounts, email accounts, much less a Bitcoin wallet. I know I could recover several of those at least from memory alone.

2. This for me is also the weak point, that most people use 2FA on a device, exposing them to at least the Password axis you mentioned. Myself I use a Google Authenticator for 2FA, as an extension only linked to 1 browser account. Browser and extension are uninstalled quickly after use. And means I could recover all my online accounts quickly from a new device with 2FA and change passwords. I expect this method opens me up to other vulnerabilities... anyone care to share?