> 1. More often than not, it's not something nefarious or convoluted, but something very simple. 2. A lot of the things Google does are for the protection of the users themselves (whether from themselves or from outside forces).
I recently had an issue where a hijacker, from another country, was able to take over my account and change the password, without access to the backup email, the SMS, or anything except the password.
Google even mailed me a warning that this user from another country was accessing the account, and changing the password.
When I tried to get it restored – I knew the phone number (but had no access anymore because the number was reassigned to another person), had the old password, access to backup email, knew the content of emails on the account, etc – I was denied.
It was easier to get the user who got my old number, contact them, and go together with them through all the steps to get the account back.
To top it even off, after I had contacted Google support about this originally, they never contacted me back – instead, once I recovered the account, I found that instead they had talked with the hijacker.
And you tell me this was to protect me? Honestly, fuck that.