“Removing physical U2F keys from an account without request seems to be the worst possible reaction to suspicious activity.”
Google flagged suspicious activity and responded by deleting the strongest login protection on the account. Then it logged her out again. There’s no human to call. The only support channel Google offers is a blog post going viral.