IMO the problem here is tht Google doesn't push backups for your codes in any capacity. They pretend that your phone is _always_ available and functioning for t

IMO the problem here is tht Google doesn't push backups for your codes in any capacity. They pretend that your phone is _always_ available and functioning for tapping yes, instead of using TOTP codes that can be backed up and synced to multiple device classes (phones, laptops, clouds, etc.). The issue with supporting text as a backup, is that it isn't nearly as secure as other options, rendering every other security measure useless as an attacker can always fall back to it. Google should ensure that if your account is 2FAed by a single device, you get a prompt to write down recovery codes or back them up, but they don't. Leading to situations like yours where you only know about this issue after you're screwed.