How is this different from signing in with a yubikey that you can never lose?