For MFA you could consider using USB security tokens, e.g. Yubikeys or other fido2 ones from various vendors.