Disclosure: I work on security at Google.
Google's security measures here largely are a result of a security problem Google created in the first place. That isn't unusual, mind you. Web design is much the same way. We create new problems via added complexity, then have to solve them.
The whole threat model that requires you put custom silicon in your servers just doesn't apply or matter to smaller parties.
This article is about the custom security silicon in Google servers, and Google Cloud employees selling the false concept that this is a must-have for anyone but themselves. This has nothing to do with 2FA, and 2FA, in case you're curious, works everywhere not powered by Google Cloud too.
Do not attack people when you do not know the topic of the conversation you are participating in.