We do have SSL certificates you're advocating for. I have two installed in my browser right now. No one but their issuers lets me log in using those.

I get the push for Cleft but fussing around to find my phone which is no more, and probably less, secure than my laptop is not really a win. It may be nice for shared workstations but those are largely on their way out. Nowadays, we have more computers around than people to use them.