I'm going to guess it's the latter. I'm unable to log into some of my existing gmail pseudonymous aliases because google refuses to let me log in without providing a phone number (ostensibly for my own security, IIRC to enable 2fa, even though it doesn't make any sense).

IIRC, and my memory of it is faint, they don't seem to require a phone number if they can otherwise identify you. For example, try it via a VPN or Tor.

There's some sort of complex formula that determines whether you need to provide a phone number, based on how many accounts have been recently created from your device, IP, etc.

I tried to create a secondary email address on Gmail and Outlook.com and they both required me enter a phone number.

Ended up using Protonmail instead, which allowed me to register with username and password and nothing else.

Lots of Google rules don't apply to specific, known-to-google "mes".

Google knows who you are by your devices, IP addresses, browser signatures, cookies, and other metrics. They don't need to verify your identity anymore, in fact they could probably tell you things about yourself that you don't even know.