I see people proposing signing devices and not connecting key to internet. This is insane ask imo. People are NOT going to jump through that hoop. I bet if you looked at 2FA hardware usage it's probably a tiny percentage.