>if I want a throwaway email, I don't need MFA because I don't care if the account is compromised.

But Google cares if their servers are used to send spam or worse, because it makes their email service less useful for other users who may not use it as a throwaway account.

I imagine it's because they would be (legally) responsible for any malicious usage of your account.