> There doesn’t seem to be any warning given that if they fail too many times they may permanently lose access to their account.

That can't actually be a thing, because it would allow a malicious person to lock out anyone's account if they just know their gmail address. Not even Google could be that stupid.