Do not "Sign in With Facebook" or "Sign in with Google" or "Sign in with Apple".

Self-host your email (it's not hard, it's not expensive) and give every org who wants your address, their own unique address, so that if^W when they *do* get breached, it's harder to correlate multiple accounts.