cross-posted from : https://lemmy.zip/post/71321898
Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance


You can have a Google account without 2FA, but you need to create it using a factory-reset old Android phone (Android 8 or so).
Why are people even complaining about this then?!
Because it’s an obscure / niche / loophole way. Not sure if it works on later Android, for example. Or in all regions.