The 2FA Google uses also sets up “primary” accounts that, when you sign in to a new device, prompts the existing ones as a “so, did you actually do that?” and you can say yes or no.
Most people don’t like this level of “annoyance.” I don’t like the idea of accounts becoming compromised.
