I use them with GPG keys, master is always offline, and in offline and secured environment you can create signkng keys that are linked the yubikey.

This approach, if implemented with bitcoin back up and signkng process, could be quite popular and imo not less secure than currwnt signing devices.

Maybe there's an imminent failure factor that I'm not aware of and the #techsavvy may shed some light on these limitations.