I lost access to my email that was username, so I cannot log in

Bitwarden’s definition of a “device” is “an installation of a Bitwarden client”, and new device login protection applies to “devices” that are “not known to the server”, which includes the scenarios that you have listed.

BTW, this does happen from time to time, but not always due to a perceived threat. There have been server-side maintenance issues that have resulted in forced logouts of large swaths of users (not sure if all) in the past.

Experience has shown that this is only the case for those users who still have access to their master password (and 2FA if enabled), which excludes a not insignificant percentage of the Bitwarden user base… Since those users are also unlikely to have any vault backups or Emergency Sheets, they will lose all vault data unless they manage to find a logged-in device that has been disconnected from the internet.

I think my comments above may side-track somewhat from your main point, which is a valid concern.