This is not 2FA that has been deliberately enabled, Google is applying an account security heuristic that says « the login is from a new device, this user has a cell phone, require confirmation via the phone ».