Tried to log in to an old gmail account. Remembered my password perfectly. But it asked for a confirmation code from an old phone number I no longer have (something it never did before). No alternative recovery options.

This is why I keep shilling decentralized social recovery.

Says someone who built a mansion on shady foundation.
You should be ashamed of yourself for calling out Gmail. Add security to EVM. At the point of sending, we should be ask to input our 2FA or at the point of migration. Today, hackers are hacking wallet simply by accessing a wrong wallet or just by screen scanner.