Ok, I assume that's with FIDO/U2F, so that's not so bad.
At that point though, you already have a hardware token capable of holding SSH keys, so I'm still not convinced of the benefit.
At that point though, you already have a hardware token capable of holding SSH keys, so I'm still not convinced of the benefit.