> If you enable it, then all your 2FAs are leaked once Google password is leaked
Nope, you'd also need my Google 2fa.