"We'll remove the phone number later"

Too late, Google now has it and can correlate my profile with other sources. There's literally no other reason why Google doesn't let you enable 2FA without a phone number.

I wish I didn't have to choose between security and privacy.