I'm just waiting for my TKey to support FIDO2/WebAuthn.

I don't trust using anything else that I can't backup myself, remote attestation is trash.