> The idea of the account being locked and requiring MFA to verify is something they made up without consulting the user.
I'd be surprised if that was true. They don't just consult me about MFA, they downright pester me about it.
Besides if you wait long enough Google unlock the account anyway (if it's due to suspicious logins). I know, because it happened to me. I don't know how long it took, all I know is when I happen to check a few months after I thought I had lost access to the account, I could login again.
Finally, it's not like they have a choice. They have to protect the reputation of their domains and servers. It may seem unfair that you cop it if there are security issues, but you got the account for free and you refused to use the numerous MFA options the provide. If someone nerfarious takes over an accout to distribute spam or malware there is a mess that costs time and money to clean up.
There is a real point to be made about how Google / Microsoft and friends message accounts. But it's hard to sympathise with complaints about free ones. Paid for ones, where they promised a certain level of service and then withdraw service without warning and without the ability to recover your data (as I think happened to to the ICC) is a different matter.