And I just found out recently that you can't log into Google on a desktop without responding to a prompt on your Android phone. Which, if you broke said phone, you can't do.
This is without 2fa enabled on my Google account.
This is without 2fa enabled on my Google account.