A login and a password do not suffice to use Google services. One must also learn how the Google security algorithm functions through trial and error, often at some monetary cost.
How, pray tell, I am supposed to tell Google that it is me trying to send an email through msmtp? Offlineimap? Chromium within Debian? That I moved, am on the other side of the world and would like to speak to my friends and family? That I don't want to tell it my real location?
I used TOR once. Outcome: account blocked and only verified through an online process which costs money, meaning that an attempt at hiding resulted in my giving my credit card information.
I live in a sad world, where I need to learn how to behave like a machine designed by well-meaning engineers expect me to. Except that there is one thing there don't expect me to do: to know my login and password, and not loose them.
