I totally feel your pain! I was in the same boat a while back trying to get my iOS app through review. Apple kept rejecting it because they couldn’t access my Google test account. Every time, Google’s security flags would pop up, and the reviewers got stuck.
After a few back-and-forths, I was like, “Okay, I need a better way to handle this.” So, I built a tool that lets you securely share OTPs (either TOTP or SMS) without exposing everything else. It unblocked the process for me, and I’ve been using it to submit updates ever since.
https://otpshare.com
Sorry for the self-promotion, but I wanted to share this since there doesn't seem to be a better way—hopefully my tool is helpful for anyone else dealing with this!