That’s a risk. I pay for my account to try and mitigate this risk so I’m the actual customer, not advertisers.

Google workspaces has a support assisted recovery option for domain owners. I host dns separately from google as their admin level recovery may require some dns signaling.

Other steps include a yubikey etc . I’ve actually had the experience of losing all my Authenticator codes on an iPhone upgrade which at the time was how I did 2fa - so had to go through recovery for many providers. My top takeaway - if I was paying for service it was possible if sometimes a bit time consuming. If I wasn’t it was hit or miss.