...as Google asked him to provide information that was only accessible if he logged in...
All too common these days. When MFA is involved, trying to get back in when locked out ranges from "shitshow" to "fucking impossible".
My all time favourite example was attempting to use Google's own service to find where I'd mislaid my phone when away from home.
1) Find another computer - check
2) Get the owner to allow me to use it - check
3) Log into Google while thanking Fuck, Shit and all their little pixies that I had stuck with a password than I can actually remember rather than allowing some POS that I now cannot use to generate one.
4) Great. now I just need to enter a 2FA authentication code.... Ah.... Right... That'll be on the phone that I'm trying to find... feeling less smug about the password...
5) 2hr Drive home.
6) Find device using another machine that I own and which is thus already set up and previously thumped in the "don't give me that 2FA shit" button.
7) Find device.
8) 2hr drive back to get it.
This does not seem like a practical way of doing things to me..