Exactly. Google created vulnerabilities for the whole industry by introducing cloud synced Authenticator codes.

Similarly the SSO sign in, which I think is much worse. Though arguably Coinbase is at fault for that one.