EDIT: You know, after some time to cool off, Google Authenticator 2FA can still be enabled and isn’t being phased out like the less secure SMS 2FA, so it’s really not the end of the world here. The chance of permanent lockout is avoided, even if the whole Google Prompt system is still wack.
There were no warnings, an unlocked bootloader was sold as a feature! The device was not set up for 2FA, it’s just shitty design!
Clearly, it was.