This sounds like an issue that could occur with any account protected by 2FA. It sounds like you were cavalier about it and now you're paying the price you kne

This sounds like an issue that could occur with any account protected by 2FA. It sounds like you were cavalier about it and now you're paying the price you knew you'd have to pay if you lost your 2FA device. There are a lot of bad actors out there trying to social hack through 2FA. The only correct move as an account provider is to tell you you're out of luck, sorry. If there's anything Google (and others) ought to do, is make the warning way scarier; or force you to check a box confirming that you've securely stored your recovery codes.