FWIW, we have ToTP 2FA at DNSimple, and we're prepping launch of FIDO support as well (feature is dark launched internally).