I feel like yubikey or equivalent is preferable to whitelisting for exchange accounts.
Discussion
I hate whitelisting. It’s the worst. Exchanges should speak xpubs but they’re too busy with Polkadot staking.
It’s the fucking worst. Idk why exchanges wouldn’t want to provide internal wallet + HW functionality. The reason is likely because they’re all highly fractionally reserved.
The step of manually entering has always felt important to me. Whitelisting feels like it encourages address reuse.