In my case, I likely would have noticed that: 1. The download link didn't show any hover effect when I moused over it 2. Google is asking me to sign in even t

In my case, I likely would have noticed that: 1. The download link didn't show any hover effect when I moused over it 2. Google is asking me to sign in even though I was obviously already authenticated 3. Even if at this point I didn't think to glance at the URL bar and actually entered my password into the phishing page, U2F would save me from being fully compromised