I read that and got genuinely preoccupied.

I immediately started reviewing the recovery options of my corporate account and de-linked all my personal information (personal email address, personal phone number for two-factor authentication, etc). I prefer to have my corporate account hacked for not having 2FA enabled than to risk my personal Google account to be locked. I went ahead and created a non-personal account with another email provider for the recovery options and tomorrow morning I will request my employer for a corporate phone number to set-up 2FA.