I got G Suite or whatever it’s called now before it was paid and before Google Domains sadly. I discovered unbelievably late that I didn’t have two factor on that account because for some reason the G Suite admin panel was defaulted to disabling it organization wide (aka just me). I don’t know why they don’t just have a $20/mo option in gmail that just does this properly in one click.