On Sun, Feb 20, 2022, 16:09 Adam Williamson <adamwill@fedoraproject.org> wrote:
It used to support these, but the support was lost with the recent
rewrite. However, it supports Google Authenticator-style OTPs. Folks
with infra privileges on their accounts (like me) are already required
to use these. It works fine. I preferred being able to use a yubikey so
I don't always have to open an app on my phone and retype a six digit
code when I need to log in to something, but that's just a minor
annoyance.

TOTP (what the authenticator app does),
is, indeed, better than nothing, but U2F
(FIDO), is considered to be stronger.