I keep considering a yubikey, but there are a few limitations that I’m still tossing up. There’s a couple of other options for security keys that I’ve read about, I’ll dig them out.

As for 2fa, Ente auth is my preferred dedicated app. Works just about everywhere, e2ee storage etc