[GoMonad]

FIDO/WebAuthn has been designed to be first factor authentication (passwordless) as well as 2FA.

Though, I agree lost and stolen devices are a problem whose solution space needs more exploring than simply multiple auth devices.

[bfulgham]

This is, of course, an active thread of discussion in the WebAuthentication working group.

[GoMonad]

Can you point me to that discussion? I'd love to read more about it.