This is not true. In some organizations I work with they only allow Security Keys on Google Workspace, you can't even use TOTP.
It's possible to disable SMS and Phone verification, but if you allow TOTP then Google Prompt is also automatically allowed.
yes I don't like security decisions forced upon me, that's reasonable. if I want a throwaway email, I don't need MFA because I don't care if the account is compromised. but I don't get to make that decision because Google decided for me that my account will have forced MFA
>if I want a throwaway email, I don't need MFA because I don't care if the account is compromised.
But Google cares if their servers are used to send spam or worse, because it makes their email service less useful for other users who may not use it as a throwaway account.
