Yes! With advanced protection you get enforced security keys, recovery only through admins, enforced safe browsing in Chrome. It's a nice way to get a bunch of improved controls in one shot.
Would be nice if Google allowed enforcing it with a grace period for new accounts though!
Agreed - there's basically nothing in GSuite about it, except the indicator on a user's page. It's enough for manual auditing at least. But since we handle it during our onboarding and we're small enough for a manual audit it works out alright.
Would be nice if Google allowed enforcing it with a grace period for new accounts though!