The part that is true though is that you're out of luck if you set a recovery phone and you no longer have access to it (same for recovery email). But even then I was offered a possibility to contact support to resolve it. And if someone is desperate they may try calling the new owner of the phone number and kindly ask for the code (you'll sound like a scammer, but hey, it's worth trying ;))