Big tech companies locking you out of your own stuff is an underrated threat vector.

I recently had a similar debacle with my Google account when I was travelling out of state and lost my phone. I needed to access my account quickly and fortunately knew my password and had added my partner's phone number as a 2fa method for exactly this kind of scenario.

Well when I went to log in Google took it upon themselves to disable that 2fa method, because it thought there were more secure options available. Except there weren't because I was far from home and all of my other devices!

I was pretty shocked that Google would change my security settings without any notice to me and confirmation on my part.