If you have your email protected with 2FA, I think you're covered -- "An unlocked device with an active session" is the thing you have. I think this is actuall

If you have your email protected with 2FA, I think you're covered -- "An unlocked device with an active session" is the thing you have. I think this is actually what's happened -- people now know not to leave unlocked devices unattended, so you basically do 2FA every time you unlock your device, so the device can now stay persistently logged into all services.