That's not entirely true about the 2FA, they do support FIDO-2 usb keys like Yubikey. Although, I'm not sure if they also require SMS to be active as a backup which would make the security key less effective.