Just to clarify; It doesn't necessarily mean that your Google account password is compromised. It lists data breaches of services where you used the provided email to register. The password you chose for that service at the time of the breach has been compromised. If you don't use the same password everywhere, or changed your password after the breach, your other accounts are not compromised.

Also, as OP said, use two-factor authentication. And please also use a password manager.

I can't speak to how you ended up on the list. The way haveibeenpwned works is that they crawl publicly available credential dumps and grab the associated usernames/emails for each cred pair. However it got there, your email ended up in one of those dumps. Recommend you change your passwords, make sure you don't repeat the same password across multiple sites and use a password manager so you don't have to remember dozens of passwords yourself.