The entire point of 2FA is to make password compromise insufficient to gain access to an account. Which makes this response just baffling. I initially thought

The entire point of 2FA is to make password compromise insufficient to gain access to an account. Which makes this response just baffling. I initially thought that the lack of any technical countermeasure might be a legitimate reason for Google to do nothing, but after I thought about it for a moment, I realized that when the 2FA system calls the user, it could simply prompt the user to do something before sending the verification code -- that way, the 2FA provider knows they aren't sending the code to voicemail. Simple and effective, and later in the post I found the author and multiple companies came up with that idea on their own.