In what way? For its employees, it uses physical keys: https://krebsonsecurity.com/2018/07/google-security-keys-neu...

Consumer/enterprise Google accounts have supported U2F and the Google Authenticator app for quite some time. I have SMS completely eliminated as a factor on my GMail account (Yubikey primary with codes from the app as a fallback; no way to authenticate via SMS at all).