https://hackaday.com/2020/10/21/google-meddling-with-urls-in...
FWIW, Microsoft have had a similar feature long before Google:
https://docs.microsoft.com/en-us/microsoft-365/security/offi...
I don't use Google Accounts without it. TOTP codes are vulnerable to phishing, and SIM swapping is very much a thing.
