Comment by m01

For MFA you could consider using USB security tokens, e.g. Yubikeys or other fido2 ones from various vendors.