I never gave a recovery phone number for any of my accounts. While they regularly ask for one to improve my security, I've never given one and they continue to

I never gave a recovery phone number for any of my accounts. While they regularly ask for one to improve my security, I've never given one and they continue to accept my logins from all over the US as well as granting some apps (thunderbird) access to the account. I do however get notifications on my phone asking if the login was me.