Ok thanks. Somehow must have missed that one - I guess it's voluntary unless you install some work related app where company security policies pretty much default to switching off any possible loophole. I don't like where this path is going to lead :(
The Advanced Protection program is opt-in for people with a high security posture
It also means you _have_ to have 2 security keys set up to login to your Google account with no other 2 factors allowed as backup