4)
b) "eh I'd rather not but I'd be ok": username + secure password, ideally + 2FA but not the end of the world. Use a secure password and a password manager.
c) "I'd live but that would really suck": username + secure password in password manager; authenticator 2FA