Still flawed seeing as you can't disable Google Prompts (that I know of) which means any security key 2FA or Passkeys that you've set up can be bypassed if your phone is stolen as someone can simply click a prompt in the Gmail app.

I wish they gave the option to disable this.