I have two-factor authentication turned on and I can see this much (in a different web browser) without entering anything: "Choose how to get back into your account. Get a password reset link at my recovery email: uch•••••••@c••••.com"

The problem may be that "me.com" is so short that Google might display the full domain name. If that's the case, Google should fix it.