Did you know that you can turn every $2 Raspberry Pi Pico clone board into a FIDO2 stick, and even make it Yubikey compatible? https://www.picokeys.com/

Well, not as secure as a commercial key, because the Pico doesn't have encrypted storage, but still much more secure than login/password.