(US) Email Recovery, Hijacked Account

A user reported their two Google email accounts were hijacked despite having 2FA and device verification enabled. The attacker sent Bitcoin transaction notifications from an old friend's account and imposed a 'parent lock' preventing recovery. The user sought help from Google and TeamYouTube without success.