Under Fingerprint Unlock -> Second Factor Pin

Graphene can do both at the same time: fingerprint+password/pin as the second factor. This won’t stop someone from holding you at gunpoint, but at least it would stop cops (in some cases)

Tuta has catch all addresses, meaning you can use any email on your domain and it will go into your inbox. You don’t even need to “create” it if the option is enabled - it just takes anything sent your domain and drops it into your inbox. For passwords, you can’t beat Bitwarden/Vaultwarden. Tuta has a calendar (but I don’t really use it, I use self hosted WebDAV instead). I’ve not needed a cloud drive (I have a NAS and nextcloud) so I can’t really suggest anything for that.

Self hosted WebDAV is probably your best bet. I have Tuta but use WebDAV for my calendar.