The guide suggests gmail and two factor, but why not also https://landing.google.com/advancedprotection/ ?