>use the recovery codes.

Fun fact: Google can decide to reject these. Lose access to the original device, try to rely on recovery codes to login with known current password on family member’s device… nope!

Wait, so I set up 2FA, printed the codes, but now if I ever lose my phone or it's stolen I'm screwed?

Google gives you no guarantee of service for your account. They could arbitrarily decide to lock you out for any reason and you have literally no recourse.

I guarantee you this is within the realm of possibility based on one single experience.

When you upgrade your phone perhaps keep your old one in a safe and charge it and login to Gmail monthly or something?

I’m also quite certain the codes could work instantly with no trouble in some circumstances. Now know it’s risky though. And I’m sure it’s a security measure based on real, deeply painful and costly instances of unauthorized access. Just don’t know what we’re exactly supposed to do…