Google's most ridiculous trick to force users into adding phone number
It can't be helped I think. The chain of trust must start somewhere.What if someone secretly have your password and enable 2FA? The addition of the 2nd factor of auth is a big deal and the process should be as secure as possible.