@AC - Re: software 2fa
Maybe you are correct. However, before selling that number Google must confirm it is mine and here lies the difficult part. I'm trained to answer the phone only if the call comes from a very specific short list of contacts. For all the rest, they can always leave me a message and I'll get back to them if it is really important.