[mbrubeck]

So you also need to make sure that your phone's browser doesn't have your Google password stored, and/or your phone's storage is encrypted with a strong-enough key.

[trentmb]

Google has made me re-enter my password when modifying 2fa settings.

[eli]

Sure, but if it's saved in the browser than it can be extracted from the browser