the most secure authenticator is web3 auth imo. We do it here too with our LN wallets. It makes 2fa, passwords and server side stored user account obsolte. No accounts, no hack.