[jesseendahl]

Google's Advanced Protection Program supports both passkeys and security keys.

[arccy]

I guess they lowered requirements recently, now you can even do "1 passkey or security key, and recovery options, like a recovery phone and email".