If the message had stated "We have removed recently added security keys" I would be a lot more understanding!
Yeah, in theory those recovery keys should still be secure, but you know for certain that a hostile attacker has the encrypted secure note, and without any confidence in lastpass it makes sense to change them as well.
Unfortunately this means you look exactly like someone doing an account takeover and changing the password and recovery keys on the account.
I don't use lastpass, but if I did I wouldn't have to because this "Just to be safe" process also reset/removed the recovery keys.
Right, that's likely the "bug" part. On HN of all places, people shouldn't be surprised that bugs happen.
If google had working support flows I would not have written this up or posted here about it.
A few years back I lost access to a different google account as the recovery phone number was a landline and google was trying to send SMS messsages to it. I had the right password but it thought I was suspicious and insisted on SMS verification. I never managed to reach a human to get something done about the issue.
They do, you just have to pay for that privilege via Google One.
Googling "google one phone number" did show me a potential scam result in the infobox at "gooogle-live-personn" on google sites that obviously isn't official. You can't make this stuff up.
Only after all of this it links to another number, which from what I can tell is a scam phone center which will offer to help you with your account for some money. I really wonder if they're betting on everything else being so hopeless that a person will eventually try to call this other number after trying all the other options before.
It does tell you something about Google support if scammers can do that...