Google is a multi-billion dollar company, they barely have to lift a finger. They simply have to provide an option to opt out of 2FA. Add a bunch of warnings if you must. Even if Google was a small startup it would be trivial for them to do this.
To be clear, your answer to vulnerable people needing protections is to lower the minimum level of security for everyone using Gmail. Do I understand correctly?
