The safest option is a hardware security key because it is not vulnerable to phishing. And I expect Google to trust it above all other forms of authentication b

The safest option is a hardware security key because it is not vulnerable to phishing. And I expect Google to trust it above all other forms of authentication because of that. So anyone who is worried about losing access to their account should immediately buy multiple hardware security keys. You don't have to buy them from Google.