Google recovery is a mess. My friend phone was hacked during travel recently so he couldn't use that phone to login. Trying to change his password from another phone was a pain and even after that it won't allow to login unless sms verification was done from hacked device, which wasn't evening any sms. My friend had also had a recovery device but even that didn't work and the login flow will keep on asking for 2FA using hacked device, so buggy flow and complete crap.