Yikes! The phone prompt would've tipped me off. Google already knows, and displays a few random digits so you remember which number or email you entered. Never asks for the whole thing when verifying, to the best of my knowledge. Thanks for the write up!