Btw. what usually works is just giving them a phone number, ideally a number that is associated with with one gmail account that is still in good standing.

Which of course completely defeats the "security" of this "security feature", but that's probably not the point of it anyway, they just want your phone number for meta data collection.