OK, dug deeper into the account used for HA automations (which is not my main Google Account or gmail). Yes it reports 2 factor has been on since middle of 2022 on the HA account login.
I’ve turned it off, on just the HA account.
Tried again to send email via SMTP. Still failed so far. I will try looking for issues I may have caused in debugging with many config changes…