Google did turn on two-step verification automatically at one point and although I turned it off, I get constant reminders for security checks that urge me to turn it back on. I would prefer not to have my account tied to my phone so if an OTP is necessary I would rather have it sent via email but not everybody gives you that choice.
On the other hand, I haven't been able to set up an instagram account. I've tried 3 email addresses and in each case got a message that it was already in use. Also, Instagram demands that you sign up using a phone number, which facebook then sells to advertisers. So I've given up on using it.