Some hackers just go for the low-hanging fruit and try the most common passwords, and there is one scenario where brute force works very well.
Google will use your mobile phone number for verification if you lose access to your account. Some people don’t want to provide that information to Google. That’s a mistake.
Yes, it’s possible. But you might want to ask a different question that will result in a more helpful answer.