While too late to help your friend, this is part of the reason I decided to pay for Google One -- I want to be a customer who can reach a human, and have some recourse.

I also use multiple yubikeys -- worth double checking time to time as my longtime key in my wallet died while I was out of town (lasted 8 yrs tho)