Everything is vulnerable. Lost my email when email provider (openmailbox.org) closed, with no chance of recovery. And with it lost a 28-years old domain.

People have lost Gmail accounts over some YouTube comment.

Lost my phone couple of times and was able to restore authy from backup ok.